I have been asked about an issue with a hosted SharePoint Foundation 2010 site.
The owner has created a library to hold scripts to be used in content editor web
parts and stuff like that. Anonymous users need to have access rights to the
library so the scripts are accessible while browsing. However, the owner would
prefer that anonymous users don't have access to the "all items" view etc of the
list.
As I understand it, in MOSS and SP2010 there is a "ViewFormPagesLockDown"
feature that you can activate from the stsadm command line that blocks access to
list view pages of lists where anonymous access is enabled after the feature is
enabled. (This means that you can selectively restrict access by enabling
anonymous access on lists before and after enabling the feature.) The feature is
enabled by default on publishing sites.
However, the site owner has two issues:
* It is a hosted site, so he doesn't have access to run an stsadm command, and
* It is SP foundation only, so the lockdown feature is not available
Are there any alternative approaches to restrict anonymous users from library
views while still allowing them access to the files?