RE: ListViewWebPart showing items without user access...

Hi, Your assumptions are correct.
As for your question:
As for the additional listview webpart, are you adding it to the default
SPS pages or a new created custom web page in the site?
We are adding the listview webpart to the default.aspx web page, not
customized.

Also, have you tried the same eventhandler and List setting on some other site or event server to see whether this is a common issue?
This is not a commom issue. It only happens on these type of sites, but the
problem is that we cant figure out, because it shouldnt be happening.
Is there any way we can check to see why the item level security on the
listview webpart is broken ? because on the default views its working ok...

--
--------------------------
Rui Barbosa
Devscope.net


"Steven Cheng [MSFT]" wrote:

Hi Rui,

From your description, you have a WSS list which is secured at item/record
level(via a custom EventHandler). The access permisson work well if a user
view the list via default views, but when you try adding an additional
listview webpart to view the list , you found that the item level security
broke, every user can see all the list items, correct?

As for the additional listview webpart, are you adding it to the default
SPS pages or a new created custom web page in the site? Also, have you
tried the same eventhandler and List setting on some other site or event
server to see whether this is a common issue?

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@xxxxxxxxxxxxxx

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
From: =?Utf-8?B?UnVpIEJhcmJvc2E=?= <ruibarbosa@xxxxxxxxxxxxx>
Subject: ListViewWebPart showing items without user access...
Date: Mon, 12 May 2008 19:10:01 -0700

Hi all,
We have a very strange problem on wss3.0+sp1+sp1posthotfix.
Its a 2 server web x64 with 6gbram server farm+sql server.
In one of our sites and list we have an event handler that breaks role
inheritance after the user inserts of an item. This hapens so that this
item
is viewed only by himself, and in the future other groups we might add.
The BIG problem is:
Imagine we have user1 and a list with 100 other people items (item level
security).
-User1 enters a new record1
-On the list pages, such as allitems.aspx, user1 sees only 1 record (as he
should) and even if he creates views of diferent types, he only continues
to
see only one record. This is correct.
-Then i (administrator) go to the site page, and add a webpart (listview)
and specify any view whatsoever.
- THE PROBLEM: When the user1 opens that page he sees all 101 records,
but
what is more awkward, is that if he presses a link (for example one of
which
he should not be able to see), it raises an error saying that the item does
not exists and the access denied.
- We checked the permission settings, of the list and items and everything
is ok. for example we checked an item that only allows access (its the only
entry defined) to user2. and on the listwebpart mentioned it is also
rendered
on the list to user1.
- Happens on all views, calendars, etc..

We are going nuts on this one.
CAN SOMEONE HELP PLEASE!!!
Thank you.
Best regards,
--
--------------------------
Rui Barbosa
Devscope
.

Relevant Pages

  • Personalizable()/WebBrowsable() issues in custom Web Part
    ... have defined the relevant property as follows on the custom Web Part: ... written a custom EditorPart to enable the users to be displayed and selected ... EditorPart are not saved back as personalised data? ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: ListViewWebPart showing items without user access...
    ... \par> As for the additional listview webpart, are you adding it to the default ... \par> SPS pages or a new created custom web page in the site? ... have you tried the same eventhandler and List setting on some other site or event server to see whether this is a common issue? ... \par Rui Barbosa ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: How can I customize autoenrollment ?
    ... Basically for custom authentication, you will need to create ... custom web pages that act as web front for the external users. ... > | certificate request and sending this private information to the server? ...
    (microsoft.public.platformsdk.security)
  • Custom Ghosted Web Part Page
    ... I am working with creating a custom web part page. ... system along with the wss 3.0 templates. ... to just add a wp page template to the existing templates). ...
    (microsoft.public.sharepoint.portalserver.development)