Reputation: 1667
My SharePoint site uses Active Directory authentication. The Site Visitors SharePoint group contains the AD group of all users.
I have a subsite which Site Visitors have Read access to. Inside this subsite, I have a document library which I don't want visitors to have read access to and so I have made the permissions unique for this document library only and only allowed 2 explicit users to have access to it.
Despite this, I can still come onto the site as a Site Visitor AD user and navigate to this document library and read the files inside.
Any idea what's going on here? I should be able to lock down lists and doc libs like this shouldn't I?
Hope someone has seen an issue like this before. Are there any pages I can view which show me what users/groups have permission to this document library other than the standard Permissions one?
Thanks
Graeme
Upvotes: 1
Views: 1472
Reputation: 2718
Hey there, I'm Kevin and I work on SharePoint permissions
If the users are site collection administrators, they will have access to the list regardless of the permissions set.
Upvotes: 0
Reputation: 5384
You might need to try out the Permissions Reporting Tool just today new version has been released.
Upvotes: 1