Microsoft Sharepoint Products and Technologies Resource Kit eBook

422 Part V: Administration of Windows SharePoint Services
Microsoft Windows SharePoint Services provides the ability to control site
access by all the following means:
■ Site groups. Site groups let you specify which of your users can perform
specific actions in your site. For example, a user who is a member of the Contributor
site group can add content to Windows SharePoint Services lists, such
as the tasks list, or a document library.
■ Anonymous access control. You can enable anonymous access to allow
users to contribute anonymously to lists and surveys or to view pages anonymously.
Most Internet websites allow anonymous viewing of the site but ask
for authentication when someone wants to edit the site or buy an item on a
shopping site.
Note You can also grant access to “all authenticated users” to allow all
members of your domain as well as trusted domains to access a website,
without having to enable anonymous access.
■ Per-list permissions. You can manage permissions more finely by setting
unique permissions on a per-list basis. For example, if you have a document
library containing sensitive financial data for the next fiscal year, you can
restrict access to that list so that only the appropriate users can view it. Per-list
permissions override site-wide permissions for the lists.
■ Subsite permissions. Subsites can either use the same permissions as the
parent website (inheriting both the site groups and users available on the
parent website) or use unique permissions different from those of the parent
site (so that you can create your own user accounts and add them to site
groups).
User Rights Available for Windows SharePoint Services
Windows SharePoint Services includes 21 rights. One of those 21 rights, Self-Service
Site Creation, is available only on a top-level website and is not available for use on
subsites. The 21 rights are used to create the five default user site groups. You can
change which rights are included in a particular site group (except for the Guest and
Administrator site groups) or create a new site group to contain a specific list of
rights. Table 16-1 is a list of rights and the groups those rights are granted to by
default.