Sunday, May 5, 2013

SharePoint 2010 SPSecurityTrimmedControl Permissions Enumeration

Introduction

When working with the SPSecurityTrimmedControl, it can be tricky knowing what combination of permissions to employ in order to accomplish the desired security trimming.  The Enumeration List below can help you make that determination easily.  This listing shows the combination of permissions to use to enable Visitors, Contributors, Designers, and/or Owners (full control) to view the items trimmed by this control.

Enumeration List
 
Group Permissions Name Description V C D O
List ManageLists Create and delete lists, add or remove columns in a list, and add or remove public views of a list.       X
List CancelCheckout Discard or check in a document which is checked out to another user.     X X
List AddListItems Add items to lists, add documents to document libraries, and add Web discussion comments.   X X X
List EditListItems Edit items in lists, edit documents in document libraries, edit Web discussion comments in documents, and customize Web Part Pages in document libraries.   X X X
List DeleteListItems Delete items from a list, documents from a document library, and Web discussion comments in documents.   X X X
List ViewListItems View items in lists, documents in document libraries, and view Web discussion comments. X X X X
List ApproveItems Approve a minor version of a list item or document.     X X
List OpenItems View the source of documents with server-side file handlers. X X X X
List ViewVersions View past versions of a list item or document. X X X X
List DeleteVersions Delete past versions of a list item or document.   X X X
List CreateAlerts Create e-mail alerts. X X X X
List ViewFormPages View forms, views, and application pages, and enumerate lists. X X   X
Site ManagePermissions Create and change permission levels on the Web site and assign permissions to users and groups.       X
Site ViewUsageData View reports on Web site usage.       X
Site ManageWeb Grant the ability to perform all administration tasks for the Web site as well as manage content. Activate, deactivate, or edit properties of Web site scoped Features through the object model or through the user interface (UI). When granted on the root Web site of a site collection, activate, deactivate, or edit properties of site collection scoped Features through the object model. To browse to the Site Collection Features page and activate or deactivate site collection scoped Features through the UI, you must be a site collection administrator.       X
Site ManageSubWeb Create subsites such as team sites, Meeting Workspace sites, and Document Workspace sites.       X
Site AddAndCustomizePages Add, change, or delete HTML pages or Web Part Pages, and edit the Web site using a SharePoint Foundation–compatible editor.     X X
Site ApplyThemeAndBorder Apply a theme or borders to the entire Web site.     X X
Site ApplyStyleSheets Apply a style sheet (.css file) to the Web site.     X X
Site CreateGroups Create a group of users that can be used anywhere within the site collection.       X
Site BrowseDirectories Enumerate files and folders in a Web site using Microsoft Office SharePoint Designer 2007 and WebDAV interfaces   X X X
Site CreateSSCSite Create a Web site using Self-Service Site Creation.        
Site ViewPages View pages in a Web site. X X X X
Site EnumeratePermissions Enumerate permissions on the Web site, list, folder, document, or list item.       X
Site BrowseUserInfo View information about users of the Web site. X X X X
Site ManageAlerts Manage alerts for all users of the Web site.       X
Site UseRemoteAPIs Use SOAP, WebDAV, or Microsoft Office SharePoint Designer 2007 interfaces to access the Web site. X X X X
Site UseClientIntegration Use features that launch client applications; otherwise, users must work on documents locally and upload changes. X X X X
Site Open Allow users to open a Web site, list, or folder to access items inside that container. X X X X
Site EditMyUserInfo Allows a user to change his or her user information, such as adding a picture.   X X X
Site ManagePersonalViews Create, change, and delete personal views of lists.   X X X
Site AddDelPrivateWebParts Add or remove personal Web Parts on a Web Part Page.   X X X
Site UpdatePersonalWebParts Update Web Parts to display personalized information.   X X X

References

No comments: