when I add user to document library, its give him/her limited access to site even though that user has a full control to site. How can I stop this? why its happening? I am not inheriting permission. Thanks,

Are you sure the same user has full control at the site level. If a user is given for instance full control for a document library that is located in a site where the user has not been allocated access rights already then the user is given limit access to that site. In other words what is happening with your users seems to fit *if* the user doe *not* have any rights to the site including the document library. SP 2010 "FAQ" (mainly useful links): http://wssv4faq.mindsharp.com/default.aspx WSS3/MOSS FAQ (FAQ and Links) http://wssv3faq.mindsharp.com/default.aspx Both also have links to extensive book lists and to (free) on-line chapters

user is in group which has a full control to site. I am adding user to doc. lib as a individual access. when you add user to doc. lib and you check site level permission you will see that user will be added to site as a limited access. but i think it shouldn't be a problem because user is added to group where group has full control. but somehow limited access is overriding permission to full control. in other site same thing is happening but user doesn't have any problem. limited access is not creating problem on this site. Thanks,

UPDATE: if you add user to existing group in document library instead of giving him direct permission that user will not have limited access to site(i.e site A) but I can not add user to existing group in doc. library in my other site(i.e. site B). That group looks like "group name[No access]" while in test environment that option is disable. Is there something wrong with site setting or document library setting in site B? thanks,

Um, there is no problem here. If you give someone access to a list/library/item/document, etc, you are essentially giving him/her "Limited Access." This case nartually arises when you don't inherit permissions. The site is not less secure by having the user show up in "Limited Access." This lets Site Owners know that such user has some rights further down the hierarchary on some object.SharePoint Solution Architect, Developer

Um, there is no problem here. If you give someone access to a list/library/item/document, etc, you are essentially giving him/her "Limited Access." This case nartually arises when you don't inherit permissions. The site is not less secure by having the user show up in "Limited Access." This lets Site Owners know that such user has some rights further down the hierarchary on some object. SharePoint Solution Architect, Developer Moderator Note: (reasons for unpropose). This post is perfectly correct and is a good answer to the question of why is my user showing up as Limited Access at site level. BUT that wasn't the question here. The question included the phrase "even though that user has a full control to site.". This post, however good, doesn't answer that question.

Thanks for the reply. So even if that user has full control permission on main site and I add that user to document library by breaking inheriting permissions, It will give him limited access to site. Is there any way we can prevent this? I thought if user doesn't has pemrission to the site and if we add user to document library, then only it will give limited access to site.

It's adding to the list because you gave the user direct access in a limited scope. As an administrator, you want to know this. Why? Because if you remove the permissions to the site, the user will continue to have site permissions (albeit in Limited Access). The system wants you to know, that even if you take away rights to a site that the user may still have rights to a library. Going a step further, if you have another user with Full Control rights on a document library, and inside the doclib you have a document that has broken inheritance, said user could have rights to that specific document. Removing his/her Full Control over the document would not remove the rights s/he has on the document. As an administer, you would be led to believe that if you removed teh Site or Library permissions of a user then the user no longer has any rights. That would be misleading, because the user does indeed have some rights to the site/library so that they can pull up their document. Hence, it is good that SharePoint shows you users with Limited Access beyond that of their other access levels. -- Mike - Thanks for the rationale in the edit.SharePoint Solution Architect, Developer