question

Shri-6058 avatar image
0 Votes"
Shri-6058 asked Shri-6058 commented

SharePoint 2013 Survey restrictions Issue

Hello,
I have a SharePoint 2013 Survey which is restricted to a set of one security group having 10 members. As per the sharepoint security, other members not in the security group should get access denied. When the url http://myportal.company.com/Lists/TestSurvey/AllItems.aspx given to non authorized users, they are able to see all questions even though they cant see any responses. It shows all questions and also display "There are no Responses".

Why this Survey list not showing others 'Access Denied' when they don't have permissions. Are there any bugs with the Survey list? Please advise. This is really urgent and we might have to drop using SharePoint 2013 Survey otherwise.



Thanks

Shri

office-sharepoint-onlineoffice-sharepoint-server-developmentoffice-sharepoint-server-customizationoffice-sharepoint-server-itpro
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JerryXu-MSFT avatar image
0 Votes"
JerryXu-MSFT answered Shri-6058 commented

Hi, @ShridharHegde-2034 ,

According to your description, you only want the survey to be viewable by a certain security group. I have done tests in my end, if you do not grant permission to view the survey, user shall only be able to see a screen like below. They cannot view the questions.
24826-image.png


So you can try to create a unique permission for you survey list and only grant permission to required users and groups.



If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


image.png (20.0 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you. That is correct. That is the problem and security issue. When restricted other list is accessed, it redirects to 'Access Denied'. Why cant this happens with Survey? It allows unauthorized user to see the above screen. Are there any documentation on why unauthorized users can see the above screen? Please help.

When user doesn't have permission, why would they allow to see above screen. Moreover, from the screen you pasted, if they can click 'All Responses' and they can view the questions from the default view even though they don't get to see the response.

Please help if there is a way to completely restrict unauthorized users access to the above page. Appreciate any reference microsoft documentation.

0 Votes 0 ·

Hi, @ShridharHegde-2034 , in fact, if the user does not have permission to that survey list, he will see nothing after clicking on the all response link, like the screenshot below:
25114-image.png



And this is a by-design behavior that users will be able to see the overview page. If you do not like it, you can insert some CSS code to hide some parts of the view.

0 Votes 0 ·
image.png (39.0 KiB)

Thank you JerryXu.

0 Votes 0 ·