Paul Grenier, Lead Moderator
Pelica
Member
Good day,
We have a requirement that there will be no site owners outside of our IT department. Our VP does not want users to be able to manipulate anything on the page - basically, everyone should be able to contribute to what they see on the page, but not be able to modify any web parts.
I've looked thru the security settings, but cannot figure out how to remove the "Modify Shared Web Part" access from Contributors. Can anyone help, please????
Vicki
eric
Moderator
I believe you'd have to remove the personal features permission setting from authenticated users in the personalization settings on the SSP.
Users with contribute access can change their personal view of web parts, but they cannot change the configuration of them. So if I wanted the announcements to be 400 by 400, I could set that on my personal view of the page, but would always render as the defaul value that your IT staff set for everyone else.
eric
Site Settings > Permissions > Permission Levels > Edit Permission Level
Remove the following from contributor:
+Manage Personal Views - Create, change, and delete personal views of lists.
+Add/Remove Personal Web Parts - Add or remove personal Web Parts on a Web Part Page.
+Update Personal Web Parts - Update Web Parts to display personalized information.
eric
Moderator
That's on a site by site basis isn't it? If it's done at the shared service provider level, wouldn't that be a global configuration change? Or would the site permissions still need to be altered?
eric
"That's on a site by site basis isn't it?"
Well, if you set this up on the site collection and inherit permissions, it will "stick" everywhere. The permission levels go through a site collection and all subsites.
As far as I know, "personal features permission setting" refers strictly to MySite functionality, not the ability to personalize individual pages--but I honestly haven't tested it.
IMHO you want to manage permission levels early on in your deployment, customizing them to suit your needs (and dump the rest). By striping the right permissions away from everyone but site admins, you should be able to manage this requirement (including making exceptions) without a lot of effort.
You must log in to post.
