Sharepoint Forum

Ask Question   UnAnswered
Home » Forum » Sharepoint       RSS Feeds

Any quick way to see where "guest" has access?

  Asked By: Grayson    Date: May 26    Category: Sharepoint    Views: 989

I need to delete and re-add a domain group to a site (different
problem has brought upon this need, but I won't go into it here/now).

Problem is, the domain group is listed as "guest" for the site, and we
have LOTS of lists and libraries. I only know how to go one by one to
check permissions for the individual lists/libraries to try and find
where this "guest" is actually permitted to see/do something.

Is there a faster way to do this?? I *really* am not looking forward
to going one by one...



7 Answers Found

Answer #1    Answered By: Christop Mcfadden     Answered On: May 26

its painful. i remove and re-add  the users. this happens when individual  document permissions  are applied from within office.

there is also a limitation on how many you can remove at once.

Answer #2    Answered By: Cory Brooks     Answered On: May 26

Unfortunately, I'm not sure it answers
my question, or at least I don't understand the answer.

I am dealing w/ sites where other folks have admin power and have
possibly/probably added user access  for specific lists  and libraries
w/in the site  collection.

I have no idea where these users may have access. I see them listed
w/ "guest" access for the entire top-level site, which is an
indicator that although they don't have site-wide permission of
reader or above, they *do* have access to one or more
lists/libraries. My problem  is finding *where* those are. The only
way I know how to do this is to click on each and every
list/library/subsite, go to its permissions, and look to see if they
were manually added to the user group  as a reader, contributor, etc.

Is there a simple way to see what the user has access to so I don't
have to go to each list/library/subsite? If I just remove the guest
user from the main site user list, won't that just kinda break
everything for that user? I won't know how/where to go back in and
re-add the user to the same lists/libraries/subsites.

Forgive me. I don't know if I'm explaining this the right way.

Something that may help me answer another question related to my
problem- I have added someone as a user of a particular list in the
main top-level site before. This worked- I gave them the link to it,
and they could easily access it (w/out seeing anything else in that
site). My situation right now involves granting access to something
that's in a subsite w/out giving read or higher access to anything
else in the entire site collection. Is this not possible? Is it only
possible at the top-level?

Answer #3    Answered By: Ruth George     Answered On: May 26

Arent the guest  permissions stemming from adding individual
permissions on documents? when you add a specific person or group  to
a list, all that happens is inheritence is broken, i.e when you add
users to the top level site  where the list is located, the user/group
you add does not cascade into the uniquely permission'd list.

(or at least thats the behavior i thought occured)

i am in agreement with you however, getting rid of "guests" on top
level sites can be extremely painful.. it seems its easier to ADD
users than it is to manage or even remove them!

Answer #4    Answered By: Peter Peterson     Answered On: May 26

Yes- as far as I know, "Guest" only appears when someone has been
added as a user to a list/library as opposed to the whole site. I
imagine it might also appear if a person is a "reader" for a whole
site, but added as a "contributor" for one of the lists  on that
site. It definitely seems to be a "flag" that there's some list-
level security w/in the site.

My problem  isn't understanding how "guest" works so much as *where*
the person is set up to access  something.

If "[mydomain]\domain users" shows up as a "guest" in my site  user
list, I need  to go through each list/library permissions  to see
where I find "domain users" listed. If "domain users" were granted
contributor rights to "shared documents" and to "issues list" (for
example) but to nothing else, I wouldn't know it without going
through each and every list/library permissions settings to find out.

Does anyone know if there's a quick  way to view "guest" access
points in a site? In the above example, I just want to see which of
the lists are accessible by all domain  users. The only way I know
how to do this is to go through one by one...and it ain't fun!

Answer #5    Answered By: Kalyan Pujari     Answered On: May 26

I think that writing a webpart that utilizes the
SPWeb.GetSubwebsForCurrentUser and then logging on as guest  may provide

Answer #6    Answered By: Isidro Berger     Answered On: May 26

Substitute provide with "prove itself", its been a long day.

Answer #7    Answered By: Schuyler Le     Answered On: May 26

We are *very* close to having a solution that will do what you want it
to do.

Didn't find what you were looking for? Find more on Any quick way to see where "guest" has access? Or get search suggestion and latest updates.