C# – How to only see “the” items on a list when using item Level permissions as a site owner

cmosssharepoint

Given a list name "User Data" and setting Item-Level Permissions to "Only their own" for read and edit.

How can I as a site owner see only my own items on that list when using the SharePoint Object Model? Basically I want to store a small amount of user maintainable data and display that through a web part.

SPList list = web.Lists["User Data"];
if (list != null)
{
    foreach (SPListItem item in list.Items)
    {
        // How to limit this for admin accounts to not see everything
        // Maybe using SPQuery instead or something?
    }
}

I guess another interesting question is, how do I tell if the current user has the "Manage Lists" permission and do some custom query?

Best Answer

Site Owner are a very special permission (actually they are not a permission) that tells SharePoint to ignore the security model and just show everything.

So you will need to check some properties on the list items to filter.

Related Solutions

Item-Level Permissions (Edit only their own but, read everyones)

when you change permission in a list Advance Settings, it still let contributors to go to EditForm but once contributors try to save item, that doesn't belong to them, it show error message that you don't have permissions.

give it a try, create an item by some user let say User1, then try to modify that item using User2 credentials (User must have only Contributor right on the site/list), it will let you go to EditForm but wont let you save item.

I hope it helps you.

Edit only owned list items in Windows Sharepoint Services 3.0

WSS has a basic UI for setting item-level permission on list items, but they hide that from the UI for document libraries. If you go into Settings->List Settings->Avanced settings for a list, you'll see the options to do pretty much what you're asking for. However, on document libraries, that UI is not available. The settings it drives, though are avaiable via the object model.

You could set those same properties for a document library like this:

SPDocumentLibrary onlyOwnLib = theWeb.Lists["DocLibName"]  
onlyOwnLib.WriteSecurity = 2;  
onlyOwnLib.Update();

And that should about do it. However, apparently that doesn't really set permissions; it just controls what the user can do via the UI. If they had another interface to the library (like via WebDAV) or list (like via the web services), it wouldn't prevent them from editing items they didn't create. If you want true item-level permissions, I think you need to go the event handler route.

This post from Matt Morse explains it in more detail, and he even wrote a command line tool to set the property (plus the .ReadSecurity property) for lists and libraries.

Best Answer

Related Solutions

Item-Level Permissions (Edit only their own but, read everyones)

Edit only owned list items in Windows Sharepoint Services 3.0

Related Topic