RE: Looking at SharePoint Security from a database perspective



Update:

Since we posted this we thought we would also update with what we have
found. When using SharePoint for English it changes the values in the
database and is referenced via the UI.

If you change the security permissions for anonymous users on say a Spanish
WSS site the permissions don't commit. So what changes when different
languages are used? The Lists table isn't tied or dependent on other tables.

"James Mueller" wrote:

> We have a custom solution using SharePoint as the backend. We haven't done
> anything with the Content Databases except call data directly with data
> views. We have noticed on the Webs table that it has a column called
> 'AnonymousPermMask'.
>
> There are numbers assigned to how security is setup through the web
> interface meaning whether or not you have Lists and Libraries anonymous or
> Full Anonymous acess to your site.
>
> My questions is what do these numbers mean from a security perspective?
>
> 0 = No Access
> 196609 = Full Access to everything within site, not admin functions but full
> Anonymous access to browse
> 65537 = Access to Lists and Libraries Only.
>
> Not to answer my own question but this is what we came up with an would like
> some validation that this is correct.
>
> --
> Thanks,
>
> James Mueller
> http://www.sharepointcommunity.com
.



Relevant Pages

  • Re: Sharepoint - where are the files?
    ... use Sharepoint here, but access a few different Sharepoint sites of partner ... You can use the Lists without http urls. ... I understand about the database part, ... Opens it via SharePoint, makes some ...
    (microsoft.public.windows.server.sbs)
  • RE: [Full-Disclosure] openssl exploit code
    ... very extensive and complete ICT security vulnerability ... database on the web, for the IT security world to ... >> An exploit code that lists you as the author has been posted to Bugtraq. ...
    (Vuln-Dev)
  • [Full-Disclosure] openssl exploit code
    ... very extensive and complete ICT security vulnerability ... database on the web, for the IT security world to ... >> An exploit code that lists you as the author has been posted to Bugtraq. ...
    (Full-Disclosure)
  • RE: SharePoint Services V3, permissions for People and Group lists
    ... If someone knew anything about SharePoint, ... works with multiple clients, and they need a way to share files with clients ... The new security trimmed ... so calendars / events lists. ...
    (microsoft.public.sharepoint.portalserver)
  • RE: SharePoint Services V3, permissions for People and Group lists
    ... If someone knew anything about SharePoint, ... works with multiple clients, and they need a way to share files with clients ... The new security trimmed ... so calendars / events lists. ...
    (microsoft.public.sharepoint.portalserver)

Loading