NZeelander

I was hoping someone could help me with this. Exhaustive searches on Google have not given me any hope, or information. I think what I'm talking about here is role based navigation -- you only see what you have access to.

Here's the skinny:
  1. We use WSS 3.0 only - no MOSS
  2. We have multiple sub-sites under our Home site.
  3. We use common navigation on the top nav bar for all sites.
  4. We are a medium sized business with sites for each department (HR, IT, Helpdesk etc)
  5. We do not give access to the IT to other departments in the company.
  6. The Helpdesk site is a sub-site of the IT site (that can change if necessary).
When users click on the IT site tab they get an "AccessDenied" page - as expected.

However:
  • Is there a way to remove the IT site from the top nav bar if the user does not have access to the site This will be a requirement for certain other departments (Legal for example) as we roll WSS out. We would prefer that there was only one way in for all users (thru the Home site) and they can navigate to only where they are allowed.
or
  • If this is not possible (I haven't been able to find anything about doing this) how can I customize the AccessDenied page I would like to be able to, at least, use the same Theme I'm using for the sites.


Re: SharePoint - Design and Customization Role based(???) top link bar - is it possible?

rick postmus

Yes this is possible. What we have done is only give the owners the right to the page. The button will then automaticly(if im correct) disappear for other people.




Re: SharePoint - Design and Customization Role based(???) top link bar - is it possible?

NZeelander

As mentioned in item 5 above - we don't give access to the IT site to any other groups. The site still appears in the top link bar. The only people who have access are the site owners and the IT group.




Re: SharePoint - Design and Customization Role based(???) top link bar - is it possible?

dink337

What Rick posted should work, so if its not there may still be a permission problem that's allowing non-athenticated users to view the tab.

We follow the exact same process for our WSS sites (non-MOSS) by breaking inheritance when a site is created, removing the standard group roles, creating the new ones and adding in the users (based on membership in Active Directory groups) to these newly created roles. By doing this, the tabs across the top only show up if you have permission to "read" or higher, to the site.

As a test, I'd suggest creating a new site then breaking inheritance on it. Remove any and all role's and groups that may be listed in it, then add a single user as a site admin (of course as a "Site Collection" owner, you'll be able to see the site as well, but the idea here it to remove everyone else manually for testing). Verify your settings in the Central Admin website for anonymous access as well in IIS (there may be some conflict in access permissions because of how these are configured), and make sure to change the anonymous access settings manually in the test site also - set it to allow anonymous access to nothing (no site access).

Try this and see if it fixes things. Most access problems in WSS are a result of incorrect permission settings...they (Microsoft) did some remarkable improvements on the level of permissions that can now be applied in this new version of WSS, but unfortunately they also created a configuration headache-waiting-to-happen if something get set wrong along the way.

Any way, hopefully this will help .

- Dink





Re: SharePoint - Design and Customization Role based(???) top link bar - is it possible?

X capegoat

Sorry to bring this back from the dead, but I'm having the same problem. It's not a permission issue, but users without permission in the subsite can still view the link ("Access Denied" if they click on it). I want to hide the link if they can't get access.

I'm running WSS and not MOSS as well.

On the main page, when I go into Top Link Bar, if I click the edit button for this trouble-link, it allows me to edit the "Type the Web address:" field whereas all the other subsite tabs have this field "ghosted" out. Is there a way I can make this subsite the same as others Thanks.





Re: SharePoint - Design and Customization Role based(???) top link bar - is it possible?

Matthew Lea

I expect the problem lies in the "IsExternal" property of the link (see http://msdn2.microsoft.com/en-us/library/microsoft.sharepoint.navigation.spnavigationnode_members.aspx). It is probably "True", in which case the UI generator doesn't perform a security check for the target prior to rendering the link.

I don't know of any way to change this value, except programmatically.





Re: SharePoint - Design and Customization Role based(???) top link bar - is it possible?

zcstrent

I am having the same problem as X capegoat described, except that I am running MOSS.





Re: SharePoint - Design and Customization Role based(???) top link bar - is it possible?

dink337

Xcapegoat,

How was the link on the top link bar originally created Did you choose the option to display a link on the top nav bar at the time the site was being created (option on template picker screen), or did you manually add the link later on. I ask because if SharePoint creates the link then it will be able to handle the permission trimming. If you create it manually, it cant.

- Dink





Re: SharePoint - Design and Customization Role based(???) top link bar - is it possible?

Cathy@Work

Hello,

I too am experiencing this problem. We are running WSS 3.0 (no MOSS). It is possible that I did not add to top link bar when the site was created and added it later. But I certainly don't want to re-create the site either. Would there be any options to overcome this issue using Sharepoint Designer





Re: SharePoint - Design and Customization Role based(???) top link bar - is it possible?

zcstrent

I experienced the same problem, and was able to fix it by modifying the NavNodes table in the content database. For more information, check this blog: http://iweblogs.blogspot.com/2007/11/navigation-of-some-tab-in-top-link-bar.html

Let me know if it works for you.

zcstrent

:: Trent's Points: http://iweblogs.blogspot.com/