SharePoint Site tab appears when user doesn’t have permission to the site

We have a rather simple WSS portal that has about six sites, shown using the standard navbar (“tabs”) across the top of the page.  This navbar is shared among all of the sites.  Each subsite has different permissions, mostly giving certain users some level of edit permission on those subsites.

Well, one of the sites has some out of the box Content Editor webparts and we wanted to allow a group of users to edit the content using these web parts.  They already had contribute permission, so they could upload documents into libraries.  However, they couldn’t edit the content because they didn’t have the edit page permission.

So, I created a new role with the “Add and Edit Pages…” permission (one of the SharePoint granular permissions you can grant) and then I granted our Editors group this role/permission.  When I logged in as an editor, I was surprised to see a tab appear in the navbar that should only be accessible by IT Administrators (it’s an “Admin” site that has some pages that IT can use to manage the portal).  When I clicked on it, I got the standard SharePoint access denied page.  However, we didn’t even want our users to see this tab.1_1

After some research, I found that the edit page permission grants users the ability to see all links, so they can edit them, even if they don’t have access to the pages that those links point to.  This makes sense, but it’s not the behavior that we were looking for!

SO, I went back to the drawing board and created a new web part that could be edited without relying on the edit page permission.  I showed it to our main editor today for the first time and she was thrilled.  She thinks the new part is much easier to use, because there is a simple edit button (that only editors can see) that then toggles the web part into edit mode. When she’s done, she just clicks a save (or cancel) button, which saves the changes and puts the web part back into display mode. 1


Using the out of the box content editor webpart, she would have to put the page into edit mode, select edit from the web part’s menu, find the edit HTML button on the web part properties panel, make the changes, click save in the web part, click ok in the properties panel, and exit edit page mode.  Whew. (Here’s the screens:)



In the end, this redesign worked out.

Print | posted @ Saturday, January 30, 2010 6:20 AM