locked
what is difference between "Deny Write" and "Full Read" permission ? RRS feed

  • Question

  • Hello,

    In web aplication level user policy we can assign "Deny Write" and "Full Read" permission, however I am not sure whast the difference between this two permission it seems very similiar to me but there must be some difference !!

    Can anyone please let me know difference between these two permission ???

    Thanks,


    Dipti Chhatrapati

    Wednesday, December 19, 2012 5:02 AM

Answers

  • Hi,

    Granting a permission level supplements any existing permission. For example, if a user has Contribute access to some websites and no access to others, granting the Full Read permission gives the user read access to all websites in all site collections. The user also retains Contribute access where it was granted.

    Denying a permission level revokes existing permissions. For example, applying Deny Write to a user prevents write access to a web application and all its site collections, even if the user had write permissions on those sites previously. Configuring Web Application Policies


    Dmitry

    Twitter Lightning Tools LogoLightning Tools Check out our SharePoint tools and web parts | Lightning Tools Blog | Мой Блог


    Wednesday, December 19, 2012 7:35 AM
  • If same user having deny write permission then he wont be able to write anything on 5 sites even if he has permission on 5 sites ?
    Exactly, you are correct. If you grant user "XYZ" "Deny Write" permission at web application level then he won't be able to write on all 5 sites. This confirms my clarification from my first post.

    Dmitry

    Twitter Lightning Tools LogoLightning Tools Check out our SharePoint tools and web parts | Lightning Tools Blog | Мой Блог

    Friday, December 21, 2012 3:14 PM

All replies

  • Hi,

    Granting a permission level supplements any existing permission. For example, if a user has Contribute access to some websites and no access to others, granting the Full Read permission gives the user read access to all websites in all site collections. The user also retains Contribute access where it was granted.

    Denying a permission level revokes existing permissions. For example, applying Deny Write to a user prevents write access to a web application and all its site collections, even if the user had write permissions on those sites previously. Configuring Web Application Policies


    Dmitry

    Twitter Lightning Tools LogoLightning Tools Check out our SharePoint tools and web parts | Lightning Tools Blog | Мой Блог


    Wednesday, December 19, 2012 7:35 AM
  • Thank you so much Dmirty for your reply !!

    What I understood is :

    Higher permission will be considered first no matter at what level permission is getting set either webapp or site or list or item !!! is that correct ?

    Scenario is like :  WebApp1 having 5 site collection and user "XYZ" having Full read permission at web application level , but that user have contribute permission for two site collections and rest 3 site collection that user will have only read permission ?

    If same user having deny write permission then he wont be able to write anything on 5 sites even if he has permission on 5 sites ?

    I got confused due to following concept :

    1) Deny Write = Read Only

    2) Full Read = Read Only

    so ultimately both results to same kind of permission !!!

    would you please further clarify ???


    Dipti Chhatrapati


    Wednesday, December 19, 2012 9:00 AM
  • I would say

    • Full Read - this is normally used for anonymous users.
    • Deny Write - used for denying access if a user belongs to more than one group.

    Thanks,

    Gourav

    Wednesday, December 19, 2012 9:32 AM
  • If same user having deny write permission then he wont be able to write anything on 5 sites even if he has permission on 5 sites ?
    Exactly, you are correct. If you grant user "XYZ" "Deny Write" permission at web application level then he won't be able to write on all 5 sites. This confirms my clarification from my first post.

    Dmitry

    Twitter Lightning Tools LogoLightning Tools Check out our SharePoint tools and web parts | Lightning Tools Blog | Мой Блог

    Friday, December 21, 2012 3:14 PM