Special Edition Using Microsoft SharePoint Portal Server By Robert Ferguson
Table of Contents
Chapter 11. Planning and Managing Security
Correcting Inappropriate Folder Permissions
[click here]
My folder's access permissions have changed, how should I correct it?
A1:
If you discover that a folder's access permissions have changed, or simply no longer accurately provide the access controls you require, perform a permissions audit on the folder to determine where the problem lies. Begin by identifying all of the users and groups granted access permissions at the folder level, and compare them to the user population you intend to access documents within that folder hierarchy. Where differences exist, add or remove users and groups to create the desired access group . If there are no indefinable discrepancies at the folder level, move your audit to the parent folder(s), working your way back to the root of the workspace as necessary.
Identify Documents Accessible by Unintended Users
[click here]
How can I ensure that my documents are secure?
A1:
To ensure that your documents are secure, establish a regiment of access testing to verify the security configuration of your SharePoint Portal Server. Create test accounts, modeled on real users and groups in your environment, and include them in your access control lists for folders you wish to examine. Using your test account's credentials, try to access documents throughout your workspace through both the Web folder and digital dashboard. Test not only documents you know the test account should be able to access, but target documents in folders outside the test users' intended access permissions as well. Perform search queries for documents your test account should not be able to see, to further ensure that your information is as secure, and sometimes obscure, as was designed.
