Hi All - I have problem in setting Item level Permissions in the sharepoint List.I have list with 100 items with 4 groups.when1 group of users login they should able to see only there items not all.ExampleContacts ListPerson 1 belongs to group1Person 2 belongs to group2Person 3 belongs to group3Person 4 belongs to group4If Person 1 Logins he shuld see only his contacts.Please help me how to do it ,I did custom activity(Actions) using workflow but didn't work.saritha k

You need to have different contact lists.Then you can restrict access to a particular contact list to the people in a single group.Optionally if you could have folders within a single contact list (and I don't think contact lists allow this!) you could restrict access to a single folder to a single group.You can't restrict access via View. FAQ sites: (SP 2010) http://wssv4faq.mindsharp.com; (v3) http://wssv3faq.mindsharp.com and (WSS 2.0) http://wssv2faq.mindsharp.com Complete Book Lists (incl. foreign language) on each site.

Hi sarithak, I have written a post in my blog regarding this. Check the post "Showing items to a particular User Group or User in a view" in my blog. Here is the link : http://sharepointissues.blogspot.com/2009/08/views-permission.html Hope this will help you. Regards Ginni

Hi Ginni - thanks for your reply .But I am looking for Permissions to be changed not the view.Automatically setting permissions to items in the list.I tried your Article its good but didnt solve my purpose.Thankssaritha k

Hi Mike - The Folder option didn't work .I checked already.Actually I developed one custom level action in Sharepoint designer workflow using infopath form where i can select users and give permissions.I sucessfulle developed action ans applied to workflow .It runs fine but when i check the permissions it give unknown Error.How to solve this.The article I follwed for this is here.http://www.codeproject.com/KB/sharepoint/CustomActivity.aspxPlease help me.thanks,Sarithasaritha k

Hi Sarithak, You may consider use the view permission feature to set different permissions for different views. For example, you can create one extra column called Belonged to to show which group should see the item. Then create a view using filter Show the item when belonged to column =group 1. Afterwards give group1 permission for this view. As a result, when the user in group1 logs in, he will only see the list items belonged to group1. Hope this helps. Lu Zou

HI Sarita,Use following Workflow activity which will give the permission on the ListItem level when User adds the List item. http://www.codeplex.com/spdactivities Use SharePoint designer and to use that workflow activity which include "Grant Permission on Item"Thismight solve your problem Thanks Shrivallabh MCTS

Hi Saritha,Have you tried the Sharepoint workflow activity which i mentioned allready mentioned,This workflow activity will definitely solve what you are expecting.when Group 1 user will get permisssion on that item as well as Group 2 user only thing you have to configure workflow activity properly through SharePoint designer.Thanks Shrivallabh MCTS

Shrivallabh:Please don't in future propose (as answers)your own replies. Wait for someone else to do so, then I might up them to Answer status.In turn help the forum by proposing the good answers *of other people* as Answers. This isn't a self-service store.(Moderator)FAQ sites: (SP 2010) http://wssv4faq.mindsharp.com; (v3) http://wssv3faq.mindsharp.com and (WSS 2.0) http://wssv2faq.mindsharp.com Complete Book Lists (incl. foreign language) on each site.

SorryMike,This is done previously at that time i am not aware about this now i not doing same mistake. I am finding how to unpropose my answer but i am not able get that there is another blog wherei made same thing. Next time i will not do this. :) Thanks Shrivallabh MCTS

Hi Shri -The activity you proposed .I worked on it .It didn't worked for me.please help me how to do this.Thanks,Sarithasaritha k

You have to use sharepoint designer to use this workflow activity.Before that remove all the Group permission on the List.On item addedworkflow should runwhich will give only permission to current user not the groupon that list item.Along with this if you wants to show users only its own list item then go to advanced setting Item-level Permissions give it ==> Only their own Thanks Shrivallabh Kulkarni MCTS

Hi shriv - I already attained that.but i want it this way .to set item level permissions for sharepoint lists and documnet libraries.based on the current user login we need to find out in which groups he is and give permissions to all those groups.example if the user creates new item it should go to all that groups including him.this is my code to get all groups based on user. using System;using System.Collections;using System.Linq;using System.Web;using System.Web.UI;using System.Web.UI.WebControls; public partial class _Default : System.Web.UI.Page { protected void Page_Load(object sender, EventArgs e) { // collect the user domain and identity string[] arr = System.Web.HttpContext.Current.Request. LogonUserIdentity.Name.Split('\\'); // update the display to show // the captured domain and user if (arr.Length > 0) { lblDomain.Text = arr[0].ToString(); lblUser.Text = arr[1].ToString(); } // clear the list of groups BulletedListOfGroups.Items.Clear(); // set the member of group label to no // as a default lblMemberOfGroup.Text = "NO"; // create an arraylist and populate // it with the list of groups that // the current user belongs to ArrayList al = new ArrayList(); al = GetGroups(); // check to see if the user belongs // to a specific group and create // a list of all of the user's groups foreach (string s in al) { // add this one to the list BulletedListOfGroups.Items.Add(s); // check to see if the user // belongs to a specific group if (s == "BXSWLT\\SomeCustomGroup") { // change the label to show // there was a match lblMemberOfGroup.Text = "YES"; } } } /// <summary> /// Get a list of all of the groups the current /// user is a member of to support test of /// MyLifeSpaceAdmin membership /// </summary> /// <returns></returns> public ArrayList GetGroups() { ArrayList groups = new ArrayList(); foreach (System.Security.Principal.IdentityReference group in System.Web.HttpContext.Current.Request.LogonUserIdentity.Groups) { groups.Add(group.Translate(typeof(System.Security.Principal.NTAccount)).ToString()); } return groups; }} Can you please help me how to put this in event handler and make it work for my sharepoint site please help me .I am very new to this and it is very high priority me .I tried workflows but no luck.please help me.saritha k

Hi Saritha, You create event handler on list item which will track the itemadding event, public override void ItemAdding(SPItemEventProperties properties) { //Write your code which will find the current user group and will give the permission to list item for this go through this http://blogs.msdn.com/ryanrogers/archive/2006/08/11/setting-list-item-permissions-programatically-in-wss-3-0-moss-2007.aspx } for registering the List event handler this go through http://msdn.microsoft.com/en-us/library/ms453149.aspx http://msdn.microsoft.com/en-us/library/ms475328.aspx in this <Receivers ListTemplateId="Give List Template Id" ListTemplateOwner="Give the List GUID"> Hope this will help you. Thanks Shrivallabh Kulkarni MCTS

Hi Shir - Thanks for helping me.I acheived this task using asp.net but couldn't get it done in event handler.This is my code in asp.net using System; using System.Collections; using System.Linq; using System.Web; using System.Web.UI; using System.Web.UI.WebControls; public partial class _Default : System.Web.UI.Page { protected void Page_Load(object sender, EventArgs e) { // collect the user domain and identity string[] arr = System.Web. HttpContext.Current.Request. LogonUserIdentity.Name.Split( '\\'); // update the display to show // the captured domain and user if (arr.Length > 0) { lblDomain.Text = arr[0].ToString(); lblUser.Text = arr[1].ToString(); } // clear the list of groups BulletedListOfGroups.Items.Clear(); // set the member of group label to no // as a default lblMemberOfGroup.Text = "NO"; // create an arraylist and populate // it with the list of groups that // the current user belongs to ArrayList al = new ArrayList(); al = GetGroups(); // check to see if the user belongs // to a specific group and create // a list of all of the user's groups foreach (string s in al) { // add this one to the list BulletedListOfGroups.Items.Add(s); // check to see if the user // belongs to a specific group if (s == "BXSWLT\\SomeCustomGroup") { // change the label to show // there was a match lblMemberOfGroup.Text = "YES"; } } } /// <summary> /// Get a list of all of the groups the current /// user is a member of to support test of /// MyLifeSpaceAdmin membership /// </summary> /// <returns></returns> public ArrayList GetGroups() { ArrayList groups = new ArrayList(); foreach (System.Security.Principal.IdentityReference group in System.Web. HttpContext.Current.Request.LogonUserIdentity.Groups) { groups.Add(group.Translate( typeof(System.Security.Principal.NTAccount)).ToString()); } return groups; }but i dunno how to get it in spgroups.i want code for that .best example is :If suppose in orkut if your frnd posts a new scrap all his group members can his his scraps same functionality i need.If user creates new item he shuld be giving permissions to all his groups.All those members cans see that item. saritha k

Hi Saritha,Your problem is how to retrieve currentuserbelongs to whichGroupPut this line of code SPUser currentUser = SPContext.Current.Web.CurrentUser; SPGroupCollection groupColl = currentUser.Groups; groupColl contains the Collection of Groups that user belongs to.And I have allready explained how to write list event handler in my earlier blog.hope this will help.Thanks Shrivallabh Kulkarni MCTS

Hi Shri - I have already written event handler but it says cannot find the group name,I am importing groups from NT windows.it is not recognizing the group name .I tested for one group even that is not working. public override void ItemAdded(SPItemEventProperties properties) { using (SPWeb web = properties.OpenWeb()) { SPGroup group; SPListItem myItem = properties.ListItem; //This line detaches the item security from the list myItem.BreakRoleInheritance( false); myItem.Update(); SPWeb myWeb = properties.OpenWeb(); // Creates an object of type SPMember to represent a group SPMember member = myWeb.SiteGroups["Test"]; // We can simply cast a SPMember object into a SPPrincipal variable SPPrincipal principal = (SPPrincipal)member; // A role definition is required to represent a permission level in SharePoint site SPRoleDefinition roledefinition = myWeb.RoleDefinitions.GetByType( SPRoleType.Contributor); SPRoleAssignment myRoleAssignment = new SPRoleAssignment(principal); myRoleAssignment.RoleDefinitionBindings.Add(roledefinition); myItem.RoleAssignments.Add(myRoleAssignment); myItem.Update(); } } } }This is my code.I also tried for Group collection this is code here . public static void AddPermissionsToGroupCollection(SPWeb spWeb, string permissionName, string[] groupCollection) { SPSecurity.RunWithElevatedPrivileges(delegate { try { //Allow updating of some sharepoint lists, (here spUsers, spGroups etc...) spWeb.AllowUnsafeUpdates = true; SPRoleDefinition roleDefinition = spWeb.RoleDefinitions[permissionName]; foreach (string group in groupCollection) { SPGroup spGroup = spWeb.Groups[group]; SPRoleAssignment roleAssignment = new SPRoleAssignment(spGroup); SPRoleDefinitionBindingCollection roleDefBindings = roleAssignment.RoleDefinitionBindings; roleDefBindings.Add(roleDefinition); spWeb.RoleAssignments.Add(roleAssignment); roleDefinition.Update(); } } catch (Exception ex) { throw ex; } finally { spWeb.AllowUnsafeUpdates = false; } }); } Please correct me if am wrong . saritha k

You might also explore a tool from TitusLabs. They implement an extension to Information Management Policy that will set the item level permission based on metadata properties. One of the properties would need to define the target group of visibility of which you then build the rule set from. Its a pretty sweet tool. ChrisCJG Twitter: http://twitter.com/givenscj

Hi Guys,Wow thats a lot of work for an event handler...Check out ILP enables item-level permission for document libraries and also allows users to select a set of default permissions that can be applied to the new items and existing items in the document library. http://ilp.codeplex.com/... The cool part is the code is available for developers... Also, check outthe Sharepoint SDK and the ConfidentialApprovalSample.... Cheers,-Ivan :)Ivan Sanders My LinkedIn Profile, My Blog, @iasanders.

Hi Thanks to all -Ivan am looking for setting permissions to user and his related groups.I can set pemrissions to sharepoint groups but unable to set custom group from Active Directory or NT .thats my problem. saritha k

Ahh, I know its and extra stpe but have youthought about ad the AD\userGroups to SharePoint Roles and then manage security through SharePoint?-IvanIvan Sanders My LinkedIn Profile, My Blog, @iasanders.

Hi Ivan - Thanks for your quick reply.No right now am getting user groups from NT.I didn't get how to "AD\userGroups to SharePoint Role" do this am really new to sharepoint ,can you please assist me how to do this.I am writing event handler with Item added and Updated events.saritha k

Hi Saritha,I didn't understand what is means by "AD\userGroups to SharePoint Role" .Can you more elaborate on what you wants to achieve.Thanks Shrivallabh Kulkarni MCTS

Hi Shri - Actually I have 1 Mani Group called Municipality and I have 127 groups under 1 main Group.If user logins we need to find ut in which groups he is Municiplaity is common for every one but we need to ignore it while setting the permissions.I tried above event handler and it is working for sharepoint groups.It is not taking the Domain groups.Can I have your Id.Its really very urgent to me and I dunno how to get this done ASAP.Thnaks for all helpsaritha k

Shri - This is my code but I can only check groups for Administartor ,Its finding all Groups but i cant set permissions I mean i Cant see all those groups for that item. public override void ItemAdded(SPItemEventProperties properties) { this.DisableEventFiring(); base.ItemAdded(properties); SPSecurity.RunWithElevatedPrivileges(delegate() { this.EnableEventFiring(); using (SPSite _site = new SPSite(properties.WebUrl)) { using (SPWeb spWeb = _site.OpenWeb(properties.RelativeWebUrl)) { //Allow updating of some sharepoint lists, (here spUsers, spGroups etc...) spWeb.AllowUnsafeUpdates = true; SPUserCollection users = spWeb.SiteUsers; SPUser user = users[properties.UserLoginName]; SPGroupCollection groupCollection = spWeb.CurrentUser.Groups; SPRoleDefinition roleDefinition = new SPRoleDefinition(); roleDefinition = spWeb.RoleDefinitions[ "Contribute"]; //SPRoleDefinition roleDefinition = spWeb.RoleDefinitions.GetByType(SPRoleType.Reader); foreach (SPGroup group in groupCollection) { //SPGroup spGroup = spWeb.SiteGroups[group]; SPRoleAssignment roleAssignment = new SPRoleAssignment(group); SPRoleDefinitionBindingCollection roleDefBindings = roleAssignment.RoleDefinitionBindings; roleDefBindings.Add(roleDefinition); spWeb.RoleAssignments.Add(roleAssignment); roleDefinition.Update(); } } } }); } saritha k

Hi Saritha,This link will be helpfull for you to retrieve AD groups for the User.http://sharepointrookie.wordpress.com/2008/07/13/display-site-members-from-ad-groups/Thanks Shrivallabh Kulkarni MCTS

Hi Shri - public override void ItemAdded(SPItemEventProperties properties) { using (SPSite _site = new SPSite(properties.WebUrl)) { using (SPWeb spWeb = _site.OpenWeb(properties.RelativeWebUrl)) { SPListItem listItem = properties.ListItem; listItem.BreakRoleInheritance( true); listItem.Update(); SPGroupCollection spgroup ; //spgroup = spWeb.SiteGroups; //SPGroupCollection groups = spWeb.CurrentUser.OwnedGroups; spgroup = spWeb.CurrentUser.Groups; foreach (SPGroup group in spgroup) { SPRoleAssignment roleAssignment = new SPRoleAssignment((SPPrincipal)group); SPRoleDefinition roleDefinition = spWeb.RoleDefinitions.GetByType(SPRoleType.Contributor); roleAssignment.RoleDefinitionBindings.Add(roleDefinition); listItem.RoleAssignments.Add(roleAssignment); spWeb.AllowUnsafeUpdates = true; listItem.Update(); spWeb.AllowUnsafeUpdates = false; } } } }I am using this code .Its working fine for Administartor.When I login as different user it shows spgroup as zero.How to solve this please help me. saritha k

Hi Saritha,Use this line of code your event handler to retrieve the Groups int userId= properties.CurrentUserId; using (SPSite _site = new SPSite(properties.WebUrl)) { using (SPWeb spWeb = _site.OpenWeb()) { SPUser operationPerformedUser = spWeb.AllUsers[userId]; SPGroupCollection spgroup = operationPerformedUser.Groups; } }Thanks Shrivallabh Kulkarni MCTS

Hi Shri - Specified argument was out of the range of valid values. Errorsaritha k

Where you got this error.There might be small mistake i have did during putting the code. Thanks Shrivallabh Kulkarni MCTS

Hi Shri - SPUser operationPerformedUser = spWeb.AllUsers[userId];here am getting,The code above I pasted working fine when login as Administrator but not working for different user please help me this done am tyring different ways making me mad.saritha k

You can wrap the calls in the SPSecurity.RunWithElevatedPrivildges method to up your code to Full Control. Then it should run.Chris Givens CEO, Architecting Connected Systems Blog Twitter

Ya right,You have to execute that code inside SPSecurity.RunWithElevatedPrivildges();Thanks Shrivallabh Kulkarni MCTS

Thanks Chris and shri -Still its taking system account as user id ,Its not taking anyother user .I did IISREST still no use. Thanks sarithasaritha k

Hi Saritha,The earlier code is SPUser operationPerformedUser = spWeb.AllUsers[userId]; not working on this line.This is code now i tested this code and this is working and retriving the Current User Groups. :) string userId = properties.UserLoginName; SPSecurity.RunWithElevatedPrivileges(delegate() { using (SPSite _site = new SPSite(properties.WebUrl)) { using (SPWeb spWeb = _site.OpenWeb()) { SPUser operationPerformedUser = spWeb.Users[userId]; SPGroupCollection spgroup = operationPerformedUser.Groups; } } }); Hope this will solve your problem. :)Thanks Shrivallabh Kulkarni MCTS

Hi shri - spWeb.SiteUsers gets all the users of the site and spWeb.SiteGroup gets all the groups to site but there is one more thing that we need, get the List of Users assigned to groups in NT. if I have to get that working then I have to add those users to Groups in sharepoint which is double work. And operationPerformedUser.Groups does not get me the list of users in Groups from NT. do you have some utility or script which syncs this list from NT to share point. Thanks.saritha k

HI Saritha, Have you tried this http://sharepointrookie.wordpress.com/2008/07/13/display-site-members-from-ad-groups/ Thanks Shrivallabh Kulkarni MCTS

Hi Saritha, your question ==> do you have some utility or script which syncs this list from NT to share point. There is no need to do any thing. Create group in AD which you have. Create group in SharePoint. Then click on add user for this SharePoint Group in this give AD group( beacause also get all the infomation AD i have tried this please still check it.) so the user added in AD automatically get added in SharePoint groups. Thanks Shrivallabh Kulkarni MCTS

Hi Shri - I am doing exactly wat u said,adding the NT group to sharepoint group.But then it is not picking users from that group ,again i need to add users even though they are in group.that's my problem.thankssaritha k

Hi Saritha, I am very sure this has to work.Thanks Shrivallabh Kulkarni MCTS

Hi Saritha, Another way is there you have to Use SharePoint timer Job which will synk NT groups to share point groups. but i dont think its require. Thanks Shrivallabh Kulkarni MCTS

Hi Shri - I didnt solve,we have to add manually even though we add group.I am adding each and every user then it works dunno why.Is there any wasy that we can put column and based on the value need to assign that related group name.examplelistitem1 Group1 it shuld have permissions set only group1listitem 2 Group2 it shuld have permissions set only group2in the list group1,group2 column is text.please help me.saritha k

HI Saritha,I have some questions 1.Create group in AD which you have. Create group in SharePoint. Then click on add user for this SharePoint Group in this give AD group( beacause also get all the infomation AD i have tried this please still check it.) so the user added in AD automatically get added in SharePoint groups.==> When you do this then that AD user can login with that SharePoint Group level permission.2.Have you tried this for accessing AD user programmaticallyhttp://sharepointrookie.wordpress.com/2008/07/13/display-site-members-from-ad-groups/ Thanks Shrivallabh Kulkarni MCTS

Hi Shri - Sorry for delay ,was not well so couldnt check ur messages, Problems is it works fine for admistrator when i login with different user like saritha01 then it says acess denied coz i belong to group which has contribute permissions, I am using NT not AD saritha k

Hi Saritha, Have you tried this code which i posted earlier for this string userId = properties.UserLoginName; SPSecurity.RunWithElevatedPrivileges(delegate () { using (SPSite _site = new SPSite(properties.WebUrl)) { using (SPWeb spWeb = _site.OpenWeb()) { SPUser operationPerformedUser = spWeb.Users[userId]; SPGroupCollection spgroup = operationPerformedUser.Groups; } } }); Thanks Shrivallabh Kulkarni MCTS

Hi Saritha k goto->list settings->advance settings->item level permissions->read access ->select their own. And add the groups to contact list: list settings->permissions to the list->add your groups

Read the following post http://www.sharepointdiscussion.com/forum/yaf_postst14_Set-column-level-permissions-in-SharePoint-2007.aspxRegards : Aziz IT Consultant , SharePoint Blogs , SharePoint Discussion

There is one nice solution of mine uploaded on codeplex. you can use it for setting item level permissions on the list very easily directly from browser. you can check it at http://stc.codeplex.com ---------------------------------------------------------------------------------------------------------------------------------------------------------- Nipesh Shah http://nipeshshah.blogspot.com

There is one nice solution of mine uploaded on codeplex. you can use it for setting item level permissions on the list very easily directly from browser. you can check it at http://stc.codeplex.com ---------------------------------------------------------------------------------------------------------------------------------------------------------- Nipesh Shah http://nipeshshah.blogspot.com

Hi All, Pretty old post, and it looks like I missed a couple of replys... It what I get for working all day and night, lol... What I meant was that you can use SharePoint Groups Like NT Local Groups where SharePoint Groups have the Permissions / Roles necessary and Contain AD Global Groups contain the users. This is like when you have a system joined to a Domain and the Domain Admins Global Group is automatically added to the Local Administratoprs Group. Also, another thought comes to mind we try to limit the number of items where we apply item level permissions. Mostly due to performance issues but also due to manageability and governamce. Have you thought about using Folders then just using an event receiver to move the list item to the correct folder.... I would enjoy hearing from Saritha and see how he resolved the issue. -IvanIvan Sanders My LinkedIn Profile, My Blog, @iasanders.

Hi All, Pretty old post, and it looks like I missed a couple of replys... It what I get for working all day and night, lol... What I meant was that you can use SharePoint Groups Like NT Local Groups where SharePoint Groups have the Permissions / Roles necessary and Contain AD Global Groups contain the users. This is like when you have a system joined to a Domain and the Domain Admins Global Group is automatically added to the Local Administratoprs Group. Also, another thought comes to mind we try to limit the number of items where we apply item level permissions. Mostly due to performance issues but also due to manageability and governamce. Have you thought about using Folders then just using an event receiver to move the list item to the correct folder.... I would enjoy hearing from Saritha and see how he resolved the issue. -IvanIvan Sanders My LinkedIn Profile, My Blog, @iasanders.