Folder-Level Security in SharePoint 2010

Create the SharePoint Groups

Here we are trying to create three SharePoint groups and a user for each group.

  1. Open your SharePoint 2010 site (if the site isn't open in your browser), click Site Actions | Site Permissions.

    SCShr1.jpg
     
  2. When the Permission page opens, click the Create Group Ribbon button.

    SCShr2.jpg
     
  3. Enter the name Apollo Marketing Team. Do not change any other property.
  4. Click OK to create the group.
  5. When the Apollo Marketing Group page opens, click New | Add Users from the menu.

    SCShr3.jpg
     
  6. Enter Domain Name\User Name in the User/Groups text box and click the Check Names icon to verify the account.

    SCShr4.jpg
     
  7. Uncheck the Send welcome e-mail to the new users checkbox.
  8. Select OK to add Mark Hanson to the group.
  9. Repeat steps 1-6 for the Gemini Marketing Team and the Orion Marketing Team using the following users:

    Gemini Marketing Team - Renee Lo: User ID Domain Name\User1
    Orion Marketing team - Spencer Low: User ID Domain Name\User2

Create the Project Documents Library

  1. Open your site then click Site Actions | Site Settings.

    SCShr5.jpg
     
  2. When the Site Settings page is open, click the Manage site features link.

    SCShr6.jpg
     
  3. Verify the Project Documents library link displays in the Quick Launch control located in the left column.

    SCShr7.jpg

Enable Developer Dashboard and Review the Execution Time

  1. Click Project Documents located in the Quick Launch control.

    SCShr8.jpg
     
  2. Scroll to the bottom of the page to review the Developer Dashboard details. Review the Execution Time located in the top, right column.

    SCShr9.jpg
     
  3. Press F5 to refresh the page and continue to review the Execution Time value to determine a basic range of times.

Break Inheritance on the Project Folders

  1. Open the SharePoint site in browser
  2. Click Project Documents to open the library.

    Hover over the Apollo folder link and click the drop-down arrow. Select Manage Permission item.

    SCShr10.jpg
     
  3. The folder is currently inheriting the permission from the parent. Click the Stop Inheriting Permissions Ribbon button.

    SCShr11.jpg
     
  4. Click OK to dismiss the Warning dialog.
  5. Verify the folder is not inheriting permissions from the parent by viewing the yellow security message below the Ribbon.

    SCShr12.jpg
     
  6. Select the checkbox located next to the Name label above the list of user permissions. This will select all user permissions associated with the library.

    SCShr13.jpg
     
  7. Click the Remove User Permissions Ribbon button to remove all selected user permissions from the library.

    SCShr14.jpg
     
  8. Click OK to dismiss the Warning dialog.
  9. Click the Remove User Permissions Ribbon button to remove all selected user permissions from the library.

    SCShr15.jpg
     
  10. Click OK to dismiss the Warning dialog.
  11. Click Project Documents to open the library.
  12. Hover over the Apollo folder link and click the drop-down arrow. Select Manage Permission item.

    SCShr16.jpg
     
  13. Click the Grant Permissions Ribbon button.

    SCShr17.jpg
     
  14. When the Permissions dialog box opens, enter Apollo Marketing team and click the Check Names icon.
  15. Select the Contributor permission.
  16. Unselect the Send welcome e-mail to the new users checkbox and click OK.

    SCShr18.jpg
     
  17. Repeat the steps for the Gemini and Orion folders using the following values:
    Gemini - Gemini Marketing team
    Orion - Orion Marketing team
  18. Open Apollo folder. Navigate down to the Folder named Break by clicking the following folders: 3/A/1/D/5/E/8.
  19. Repeat the steps to assign the Apollo Marketing team to the Break folder.

View Content Using Test User Accounts

In this task, you verify the folder-level permissions to ensure they are set correctly.

  1. Click the Welcome control displaying your login name in the upper, right corner of the home page. Select Sign in as Different User.

    SCShr19.jpg
     
  2. Enter Domain Name/user the user. Select OK.
     
  3. Click Project Marketing Plans link in the Quick Launch control to open the library.
  4. Verify Mark Hansen can view only content located in the Apollo folder.

    SCShr20.jpg

Review the Execution Time with Unique Permissions

  1. Click Project Documents, which is located in the Quick Launch control.

    SCShr21.jpg
     
  2. Scroll to the bottom of the page to review the Developer Dashboard details. Review the Execution Time located in the top-right column.

    SCShr22.jpg
     
  3. Press F5 to refresh the page and continue to review the Execution Time value to determine a basic range of times.
  4. Compare the range