| Developing a security plan is critical in two areas ”for document management tasks as well as in support of searching. Access to sensitive information must be restricted, and in document approval scenarios, only those with discrete edit or approve rights may be able to view a document until it is ready to be pushed out to a more general audience. In search scenarios, it is important that documents that are not to be made available for select user communities must not be compromised. That is, the results of a search must not yield documents to which a particular user should have no access. Microsoft SharePoint Portal Server security leverages standard Windows-based encrypted authentication to ensure password security. Additionally, access to documents may be controlled by using a fixed set of three roles ”assigning a specific role to a user gives that user permission to perform specific tasks in the workspace. Note that you must configure each workspace folder to include a set of users or groups assigned to specific roles. NOTE When SharePoint Portal Server crawls documents stored on an organization's servers, the security policy on each document is enforced when SharePoint Portal Server provides search results ”SharePoint Portal Server recognizes any security policies that are currently assigned to the organization's servers, databases, or file shares. This is good news for a company like ABC, where many documents spread out across multiple servers, shares, and networks will be ultimately crawled. As SharePoint Portal Server enforces file-level security, not share-level security, all documents maintain a tight level of inherent security.
 | 
