SharePoint：您无法授予有限的访问权限级别
我的团队实现了一个 UI，用于向特定 SharePoint 列表上的用户分配/撤销权限级别。 UI 提供“撤消”功能来恢复用户在通过 UI 更改之前所拥有的权限。
现在，如果用户具有“受限访问”权限级别，则会出现问题：当您对 UI 进行更改时，此权限级别将被删除。当尝试撤消时，应再次添加权限级别，这会导致
您无法授予用户有限的访问权限级别。
当用户有权访问网站下的某些实体时，SharePoint 会自动授予该权限级别。无法手动授予。然后，该权限级别将被站点中的所有列表继承。但是，在打破列表上的继承后，我可以手动撤销该权限，只是之后我无法重新授予它。
因此，SharePoint 非常特别地对待该权限级别，我想知道如何在我们的撤消功能中解决这个问题。
我的问题：
- SharePoint 仅在网站级别授予此“有限访问权限”，并且下面的所有列表仅通过继承意外包含该权限，我是否理解正确？
- 该权限级别对列表有任何影响，还是仅适用于网站本身？
- 那么，当用户单击“撤消”时，仅将其从列表中删除并且不再添加它是否会保存，因为它无论如何都没有效果？
My team implemented a UI to assign/revoke permission levels to users on a certain SharePoint list. The UI supplies an "undo" feature to restore the rights the user had before they were changed through our UI.
Now there is a problem if the user had the "Limited Access" permission level: This permission level is removed when you do a change over the UI. When trying to Undo, the permission level should be added again, which leads to a
You cannot grant a user the limited access permission level.
SharePoint grants that permission level automatically when a user gets access to some entity beneath the site. It cannot be granted manually. This permission level is then inherited by all lists in the site. However, after breaking inheritance on a list, I can revoke the right manually, only, I cannot re-grant it afterwards.
So SharePoint treats that permission level quite particularly and I'm wondering how to work around that in our undo feature.
My questions:
- Did I get it right that this "limited access" is granted by SharePoint on the site level only, and all the lists beneath only contain that accidentally through inheritance?
- Does that permission level have any effect at all on a list, or does it only apply to the site itself?
- So, would it be save to just remove it from a list and do not add it anymore when the user clicks "undo", since it has no effect anyway?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我敢于回答我自己的问题，仅供未来读者参考：
根据微软的文章权限级别和权限,
和
实际上，这意味着：
I dare to answer my own question just for reference for future readers:
According to Microsoft's article Permission levels and permissions,
and
In practice this means that:
删除对顶级站点具有有限访问权限的用户实际上不应删除他们对下面的列表或库的显式访问权限（权限已损坏），但 MS 在上述文章中确实说过：
这表明应在站点权限上声明用户的受限访问权限。我认为在做出任何假设之前最好先在您的网站上进行测试。
Removing a user with Limited access on the top level site should not actually remove their explicit access on the list or library below (with broken permissions) but MS do say in the above mentioned article:
This suggests that the user's Limited access should be declared on the site permissions. I think its always best to do a test on your site first before making any assumptions.