Security for documents is important for most organizations. Some organizations need to restrict access to specific documents.
Security is used in multiple ways in SharePoint. This article provides an overview of the security features that can be used when managing access to documents and libraries, which is also a supplementary to my previous posting, <<SPS中Shared Documents的访问权限管理>> http://www.cnblogs.com/rickie/archive/2004/08/19/34658.aspx.
1. Managing Site Security with Site Groups
Site groups control the overall actions that users can perform on the site. When users are granted permission to access the site, they must be assigned to at least one site group. The default groups are Reader, Contributor, Web Designer and Administrator.
2. Create a custom site group
In some situation, those default groups can’t meet your requirements to restrict access control. So custom site groups can be created with rights selected by the creator the group. Please follow the following steps to create a custom site group.
(1) Navigate to top-level web site, and click on Site Settings on the top navigation bar, and then from that page, click on Go to Site Administration link under Administration section.
(2) From Top-level Site Administration page, click on Manage site groups link under Users and Permissions section.
(3) Click on Add a Site Group to add a new group.
Figure 1: Add a custom site group
(5) You can click on custom site group name. On the next page, you can add a new member to the group. That is to say, you assign that member the specific rights, which the custom site group provides.
3. The rights assigned to site groups can also be modified.
This is done as follows:
(1) Click on the group to be changed. The names of the people assigned to that group are then displayed.
(2) Click on Edit Site Group Permissions, the rights for the entire group are to be changed.
4. Provide access control to a specific Documents and Libraries
At first, navigate to Customize Documents and Libraries page. Then Click on Change Permissions for this document library.
In my previous posting, there are detailed steps showing you how to do it.
On that page, you can click on Add Users to add a new user. On the next page, click on Advanced permissions to switch to advanced permissions view, where you can control more fine granularity.
Figure 2: Advanced permissions view
In summary, please note that if members belong to other groups. For example, if Rickie is a member of Contributor Group and Custom Group, he will inherit rights from both groups.
Keep in mind, what you did over there will only have an effect on access right of the specified Documents and Libraries and not affect other lists or sections.