{"id":1155,"date":"2007-03-12T16:05:00","date_gmt":"2007-03-12T21:05:00","guid":{"rendered":"http:\/\/blogs.devhorizon.com\/reza\/?p=1155"},"modified":"2012-06-30T23:54:18","modified_gmt":"2012-07-01T04:54:18","slug":"role-based-security-model-in-wss-30-part2","status":"publish","type":"post","link":"https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/","title":{"rendered":"Role-based security model in WSS 3.0 – Part2"},"content":{"rendered":"

Title: Subsites with unique Role Assignments<\/strong><\/p>\n

 <\/p>\n

This is the second article in a series about Role-based security model in WSS 3.0. In part1 <\/a>, I described the basics about this model and in this part , I am going to explain how to create subsites with unique Role Assignments.<\/p>\n

 <\/p>\n

1)<\/strong> First, let’s create a subsite:<\/p>\n

 <\/p>\n

SPWeb web = SPContext.Current.Web;
\nSPWebCollection spwc = web.Webs;
\nSPWeb newweb = spwc.Add(this._txtBoxSiteName.Text.Trim(), this._txtBoxSiteName.Text.Trim(),”This site is created programatically”, web.Language, templateCreateWeb,true, false);
\nnewweb.AllowUnsafeUpdates = true;
\n2)<\/strong> Now we need to break the role assignments for the newly created site\u00a0:<\/p>\n

 <\/p>\n

newweb.BreakRoleInheritance(false);
\n3)<\/strong> This step is to create 3 custom site groups for Visitors, Members and Owners:
\n\/\/Setup Custom Owner Site Group
\ngrpOwnersName = newweb.Name + ” Owners Group”;
\nnewweb.SiteGroups.Add(grpOwnersName, web.AssociatedOwnerGroup, null, string.Format(“This group is automatically created from the parent class site:{1}<\/a>“, newweb.Url, newweb.Name));
\nSPGroup grpOwners = GetSiteGroup(newweb, grpOwnersName);<\/p>\n

 <\/p>\n

\/\/Setup Custom Members Site Group
\ngrpMembersName = newweb.Name + ” Members Group”;
\nnewweb.SiteGroups.Add(grpMembersName, web.AssociatedOwnerGroup, null, string.Format(“This group is automatically created from the parent class site:{1}<\/a>“,newweb.Url,newweb.Name));
\nSPGroup grpMembers = GetSiteGroup(newweb, grpMembersName);<\/p>\n

 <\/p>\n

\/\/Setup Custom Visitors Site Group
\ngrpVisitorsName = newweb.Name + ” Vistors Group”;
\nnewweb.SiteGroups.Add(grpVisitorsName, web.AssociatedOwnerGroup, null, string.Format(“This group is automatically created from the parent class site:{1}<\/a>“, newweb.Url, newweb.Name));<\/p>\n

 <\/p>\n

SPGroup grpVistors = GetSiteGroup(newweb, grpVisitorsName);<\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

4)<\/strong> In order for SharePoint to recognize our custom groups as the site’s associated vistors,members and owners group , you need to update the following properties in your new web bucket:<\/p>\n

 <\/p>\n

\/\/Assign Custom Groups To Counterpart Associate Groups
\nnewweb.Properties[“vti_associateownergroup”] = grpOwners.ID.ToString();
\nnewweb.Properties[“vti_associatemembergroup”] = grpMembers.ID.ToString();
\nnewweb.Properties[“vti_associatevisitorgroup”] = grpVistors.ID.ToString();
\nnewweb.Properties[“vti_associategroups”] = string.Format(“{0};{1};{2}”, grpOwners.ID.ToString(), grpMembers.ID.ToString(), grpVistors.ID.ToString()); \/\/show custom groups in the quick launch when users navigate to “People and Groups”
\nnewweb.Properties.Update();<\/p>\n

newweb.Update();<\/p>\n

 <\/p>\n

5)<\/strong> Now that our custom site groups are properly set up , we need to populate them with the appropriate users. In this example I am getting users from their counterpart group in the parent site:<\/p>\n

 <\/p>\n

\/\/Add Users To The Owners Custom Site Group
\nforeach (SPUser spu in web.AssociatedOwnerGroup.Users)
\n{
\nnewweb.SiteGroups[grpOwnersName].AddUser(spu);
\n}<\/p>\n

\/\/Add Users To The Members Custom Site Group
\nforeach (SPUser spu in web.AssociatedMemberGroup.Users)
\n{
\nnewweb.SiteGroups[grpMembersName].AddUser(spu);
\n}<\/p>\n

 <\/p>\n

6)<\/strong> This is the most important step in which we actually assign the permissions to the groups and as described in part1, we create Role Assignments for doing so:<\/p>\n

 <\/p>\n

\/\/ Set Permissions For Owners Custom Site Group
\ngroupID = int.Parse(newweb.Properties[“vti_associateownergroup”]);
\ngroup = newweb.SiteGroups.GetByID(groupID);
\nif (group != null)
\n{
\nassignment = new SPRoleAssignment(group);
\nrole = newweb.RoleDefinitions[“Full Control”];
\nassignment.RoleDefinitionBindings.Add(role);
\nnewweb.RoleAssignments.Add(assignment);
\n}<\/p>\n

 <\/p>\n

\/\/ Set Permissions For Owners Custom Site Group
\ngroupID = int.Parse(newweb.Properties[“vti_associatemembergroup”]);
\ngroup = newweb.SiteGroups.GetByID(groupID);
\nif (group != null)
\n{
\nassignment = new SPRoleAssignment(group);
\nrole = web.RoleDefinitions[“Contribute”];
\nassignment.RoleDefinitionBindings.Add(role);
\nnewweb.RoleAssignments.Add(assignment);
\n}<\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

After all these steps, result is a sub site that is NOT inheriting its membership from its parent. This site has three sharepoint site groups in it to which you can add more users and manage them independently from its parent site.<\/p>\n

 <\/p>\n

\n","protected":false},"excerpt":{"rendered":"

Title: Subsites with unique Role Assignments   This is the second article in a series about Role-based security model in WSS 3.0. In part1 , I described the basics about this model and in this part , I am going to explain how to create subsites with unique Role Assignments.   1) First, let’s create […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[42],"tags":[],"class_list":["post-1155","post","type-post","status-publish","format-standard","hentry","category-general"],"yoast_head":"\nRole-based security model in WSS 3.0 - Part2 - Reza Alirezaei's Blog %<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Reza Alirezaei\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2007\\\/03\\\/12\\\/role-based-security-model-in-wss-30-part2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2007\\\/03\\\/12\\\/role-based-security-model-in-wss-30-part2\\\/\"},\"author\":{\"name\":\"Reza Alirezaei\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#\\\/schema\\\/person\\\/cdbb24d283697a65951cb4a14e474938\"},\"headline\":\"Role-based security model in WSS 3.0 – Part2\",\"datePublished\":\"2007-03-12T21:05:00+00:00\",\"dateModified\":\"2012-07-01T04:54:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2007\\\/03\\\/12\\\/role-based-security-model-in-wss-30-part2\\\/\"},\"wordCount\":570,\"commentCount\":0,\"articleSection\":[\"General\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2007\\\/03\\\/12\\\/role-based-security-model-in-wss-30-part2\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2007\\\/03\\\/12\\\/role-based-security-model-in-wss-30-part2\\\/\",\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2007\\\/03\\\/12\\\/role-based-security-model-in-wss-30-part2\\\/\",\"name\":\"Role-based security model in WSS 3.0 - Part2 - Reza Alirezaei's Blog %\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#website\"},\"datePublished\":\"2007-03-12T21:05:00+00:00\",\"dateModified\":\"2012-07-01T04:54:18+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#\\\/schema\\\/person\\\/cdbb24d283697a65951cb4a14e474938\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2007\\\/03\\\/12\\\/role-based-security-model-in-wss-30-part2\\\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#website\",\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/\",\"name\":\"Reza Alirezaei's Blog\",\"description\":\"Blogging from the field!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#\\\/schema\\\/person\\\/cdbb24d283697a65951cb4a14e474938\",\"name\":\"Reza Alirezaei\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g\",\"caption\":\"Reza Alirezaei\"},\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/author\\\/rezaa\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Role-based security model in WSS 3.0 - Part2 - Reza Alirezaei's Blog %","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/","twitter_misc":{"Written by":"Reza Alirezaei","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/#article","isPartOf":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/"},"author":{"name":"Reza Alirezaei","@id":"https:\/\/blogs.devhorizon.com\/reza\/#\/schema\/person\/cdbb24d283697a65951cb4a14e474938"},"headline":"Role-based security model in WSS 3.0 – Part2","datePublished":"2007-03-12T21:05:00+00:00","dateModified":"2012-07-01T04:54:18+00:00","mainEntityOfPage":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/"},"wordCount":570,"commentCount":0,"articleSection":["General"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/","url":"https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/","name":"Role-based security model in WSS 3.0 - Part2 - Reza Alirezaei's Blog %","isPartOf":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/#website"},"datePublished":"2007-03-12T21:05:00+00:00","dateModified":"2012-07-01T04:54:18+00:00","author":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/#\/schema\/person\/cdbb24d283697a65951cb4a14e474938"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blogs.devhorizon.com\/reza\/2007\/03\/12\/role-based-security-model-in-wss-30-part2\/"]}]},{"@type":"WebSite","@id":"https:\/\/blogs.devhorizon.com\/reza\/#website","url":"https:\/\/blogs.devhorizon.com\/reza\/","name":"Reza Alirezaei's Blog","description":"Blogging from the field!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blogs.devhorizon.com\/reza\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blogs.devhorizon.com\/reza\/#\/schema\/person\/cdbb24d283697a65951cb4a14e474938","name":"Reza Alirezaei","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g","caption":"Reza Alirezaei"},"url":"https:\/\/blogs.devhorizon.com\/reza\/author\/rezaa\/"}]}},"_links":{"self":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1155","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/comments?post=1155"}],"version-history":[{"count":2,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1155\/revisions"}],"predecessor-version":[{"id":1377,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1155\/revisions\/1377"}],"wp:attachment":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/media?parent=1155"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/categories?post=1155"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/tags?post=1155"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}