Knowledge Base

In SharePoint 2007, you can set permissions on webs, lists, and list items.  This article describes how to set permissions on a list, but the concept will apply to other objects that have security settings as well.

Note:  Depending on your configuration, you may need to break role inheritance on the web containing the list.  See the Break Role Inheritance task for more information.

To grant a user permissions on a list:

1. Obtain a reference to the list you want to apply permissions to using a task such as Open List or Create List.
2. Add a new Get Role Definition by Type task.  On this task, set the RoleType property to the role you want to add the user to.
3. Add a new Add Role Assignment task.  On this task:
1. Chain the SecurableObject property from the List property on the task referenced in step 1.
2. Chain the DefaultRoleDefinition property from the RoleDefinition property of the task created in step 2.
3. Set the LoginName property to a value such as "DOMAIN\username".
4. Set the Name property to a value such as "John Doe".
5. Set the Email property to a value such as johndoe@domain.com (optional).
6. Set the Notes property to a value such as "John can read this list" (optional).
4. Build and run your project.

To remove a user's permissions on a list:

1. Obtain a reference to the list you want to apply permissions to using a task such as Open List or Create List.
2. Add a new Get Role Assignment task.  On this task:
1. Chain the SecurableObject property from the List property on the task referenced in step 1.
2. Chain the WebReference property to the web reference that contains the list.
3. Set the PrincipalName property to a value such as "DOMAIN\username".
3. Add a new Remove Role Assignment task.  On this task:
1. Chain the SecurableObject property from the List property on the task referenced in step 1.
2. Chain the RoleAssignment property from the RoleAssignment property on the task created in step 2.
4. Build and run your project.

You may also want to create and define your own role definitions to define your own custom permissions.  You must either do this at the root web of your portal, or you must break role inheritance on the web.  To add a new role definition, use the Add Role Definition task:

1. Obtain a reference to the web you want to apply permissions to using a task such as Create Site or Open Site.
2. Add a new Add Role Definition task.  On this task:
1. Chain the WebReference property from the web reference on the task referenced in step 1.
2. Set the Name property to a value such as "My Role Definition".
3. Set the Description property to an appropriate description for the role definition.
4. Set the BasePermissions property to a valid combination of permissions for your role definition.  More information on this property can be found below.
5. If desired, set the OpenOnExists property to true if you want to open the role definition if it already exists.
3. Use another task, such as Add Role Assignment, to consume the RoleAssignment property from your new role definition.

The BasePermissions property has the following restrictions and notes:

• EmptyMask cannot be specified with any other setting.
• FullMask cannot be specified with any other setting.
• Some properties depend on others.  See the SharePoint documentation for additional details.

Depending on your needs, you may want to create an aggregate to perform these functions.  For more information on how to create and manage aggregates, see the Kivati documentation.