Toluu

Mike Walsh's WSS and more

Some rather hairy security trimming (or rather not!) revelations in the Wrox Search bookDecember 10 2008

As all of you will know one of the main advantages of WSS 3.0 (and MOSS 2007) over WSS 2.0 (or SPS 2003) was that users no longer saw things they couldn't do anything with.

This is officially known as "security trimming".

Now search has always had the problem that depending on the rights given to the indexing routine it could well be indexing stuff that you either don't want any non-Administrator to see or - more commonly - that you don't want a particular section of the user population to see.

That of course is where security trimming is supposed to come in. The user's search will filter out from the totality of hits all those documents (or areas of the site) that that particular user isn't allowed to see and will present to him/her only the ones he/she can look at.

That's the theory and in general it works.

But according to the search book's chapter (8) on "Securing your search results" there are some cases where that isn't the case.

One of those is if you have placed the Best Bets web part (which naturally isn't called the "Best Bets" web part - that would be too simple - it's actually called the "Search High Confidence Results" web part) on a page then the "results are not security trimmed".

The reason given is (and I don't understand it but you might) "SharePoint does not place ACLs on best bets, and best bets are shown in their own web part, sep

The Collutions site is down - for how long I don't knowDecember 4 2008

Judging by the Google clicks on the site, the original Collutions (wss.collutions.com) site went down about midday Wednesday EST.

The hoster's own site isn't responding either, so this may be a long wait (and maybe even the end of this site).

In the meantime all of the same WSS FAQ content is available at www.wssfaq.com which as always links to http://wss.asaris.de/sites/walsh/default.aspx

WSS FAQ additions and corrections CXXX - 23rd - 29th November 2008November 29 2008

Note: All of the addresses of the KB / Articles - 2007 Products / MS / Non-MS Articles below were valid at the time I added them to the WSS FAQ
site and to this file. I can't guarantee that they still are.

(Items are added to the WSS FAQ throughout the week so you will find new items more quickly by checking at wss.collutions.com or www.wssfaq.com daily.)

From 23rd - 29th November 2008

NOTE: Amendment to KB articles: Microsoft are now not amending the date of a KB article if the change made is marked as a version point change (so from 2.2 to 2.3 for instance).
This ought to mean that the amendment made is cosmetic rather than important as important text changes ought to result in a major version change (such as from 2.2 to 3.0).
Because of this change and to avoid unnecessary effort I will in future not amend the listings in the WSS FAQ sites if only a minor version change has taken place.
I will continue to amend both the date and version numbers of major version changes and of course will continue to add all relevant new KB articles that my RSS feeds and other sources give me.

I.1 2007 KB Articles 

New

None

Modifed

WSS FAQ additions and corrections CXXIX - 16th - 22nd November 2008November 22 2008

Note: All of the addresses of the KB / Articles - 2007 Products / MS / Non-MS Articles below were valid at the time I added them to the WSS FAQ
site and to this file. I can't guarantee that they still are.

(Items are added to the WSS FAQ throughout the week so you will find new items more quickly by checking at wss.collutions.com or www.wssfaq.com daily.)

From 16th - 22nd November 2008

NOTE: Amendment to KB articles: Microsoft are now not amending the date of a KB article if the change made is marked as a version point change (so from 2.2 to 2.3 for instance). This ought to mean that the amendment made is cosmetic rather than important as important text changes ought to result in a major version change (such as from 2.2 to 3.0).
Because of this change and to avoid unnecessary effort I will in future not amend the listings in the WSS FAQ sites if only a minor version change has taken place. I will continue to amend both the date and version numbers of major version changes and of course will continue to add all relevant new KB articles that my RSS feeds and other sources give me.

I.1 2007 KB Articles    (*now only one section for WSS and MOSS*)

New

WSS FAQ additions and corrections CXXVIII - 9th - 15th November 2008November 15 2008

Note: All of the addresses of the KB / Articles - 2007 Products / MS / Non-MS Articles below were valid at the time I added them to the WSS FAQ
site and to this file. I can't guarantee that they still are.

(Items are added to the WSS FAQ throughout the week so you will find new items more quickly by checking at wss.collutions.com or www.wssfaq.com daily.)

From 9th - 15th November 2008

NOTE: Amendment to KB articles: Microsoft are now not amending the date of a KB article if the change made is marked as a version point change (so from 2.2 to 2.3 for instance).
This ought to mean that the amendment made is cosmetic rather than important as important text changes ought to result in a major version change (such as from 2.2 to 3.0).
Because of this change and to avoid unnecessary effort I will in future not amend the listings in the WSS FAQ sites if only a minor version change has taken place.
I will continue to amend both the date and version numbers of major version changes and of course will continue to add all relevant new KB articles that my RSS feeds and other sources give me.

I.1 2007 KB Articles    (*now only one section for WSS and MOSS*)

New