Programmatically Set Permissions


This is some example code I wrote the for the MSDN forums to showcase how you can programmatically set permissions. This code will work for splists or spwebs (in the example it’s SPList permissions, but just changing those calls to go off of Web will switch it). In addition, this shows how to set permissions automatically at feature activation using a SPFeatureReceiver. Double bonus! 😉

#region feature event handler
// actions to perform when feature is activated/removed
class FeatureReceiver : SPFeatureReceiver
{
#region Activate and install feature
public override void FeatureActivated(SPFeatureReceiverProperties properties)
{
SPWeb web = (SPWeb)properties.Feature.Parent;
SPList list = web.Lists[“ListName”];

//get users and groups so we can add them to the list
SPUserCollection users = web.Users;
SPGroupCollection groups = web.Groups;

//get current permissions and permission definitions so we can apply permissions
SPRoleAssignmentCollection rolesCol = list.RoleAssignments;
SPRoleDefinitionCollection roleDefs = web.RoleDefinitions;

//get a specific user or ad security group by username
SPUser myUser = web.EnsureUser(@”DOMAIN\MySecurityGroup”);
SPRoleAssignment addUser = new SPRoleAssignment(myUser);

//create new roles binding for user or group
SPRoleDefinitionBindingCollection bindUser = addUser.RoleDefinitionBindings;
//give contribute rights to user or group, this can be the friendly name of any role definition
bindUser.Add(roleDefs[“Contribute”]);
//add the user to the existing role assignment collection for the object 🙂
rolesCol.Add(addUser);
//and finally we update to apply our changes
list.Update();
}
}

  1. #1 by Chris Romp on March 14, 2011 - 9:30 pm

    Or for lazy people like me, you can use workflow (automatic or ad hoc) to change item permissions. I had a client ask for “Google docs-like sharing,” and despite my explaining why having unique permissions on every item was a very bad idea, it was still pretty cool to implement it on 2010 with a custom form, ribbon button, and zero lines of code.

    But your way is cool, too. 🙂

    • #2 by Maarten on March 15, 2011 - 10:18 am

      It’s nice when workflow will work for your requirements. In this case workflow didn’t do everything we needed. In other cases I’ve used workflow for this though.

(will not be published)


%d bloggers like this: