Forum Discussion
Edit Permission Allows Deletion
- May 09, 2017IMHO this is how it works now...since you have the Edit permission that is SharePoint permission behind the scenes, you are a collaborator in the file and you can delete it
jcgonzalezmartinis correct, as always.
When you choose to give edit rights while sharing, you are actually assigning behind the scenes the SharePoint "Contribute" permission level, which allows users to "view, add, update, and delete list items and documents" (from https://support.office.com/en-us/article/Understanding-permission-levels-in-SharePoint-87ecbb0e-6550-491a-8826-c075e4859848).
Unforunately there is not a permission level which allows users to edit but not delete documents.
While I appreciate the replies, I can tell you that our users will reconsider using OneDrive for Business to share files with others when they know that this can happen. I am sure that there are plenty of scenarios where allowing others to delete your files makes sense, but not providing a simple way to allow editing without deletion will make users uncomfortable with the platform.
- DeletedMay 13, 2017
The delete right being part of the "Edit" permission isn't the biggest issue in our environment. Instead, our biggest issue is people with "Edit" permissions have the right to change permissions on the document/library/list/site.
IMHO, when Microsoft made "Edit" the default with SP2013/SharePoint Online, it was a huge mistake.
- JamesRMay 14, 2017Brass Contributor
Totally agree with you. EDIT permissions SHOULD NOT allow permission controls. This is undermining our ability to use ODFB since users (content owners) do not have control over access to their files if they collaborate.
I assume the thinking behind this behavior is that if someone can edit a document, they can download and share it -- but the same is true for READ as well and READ does not have permission controls.
So IDK what they heck the thinking is.
Read = Read
Edit = Contribute (don't like the delete list permission, but understand it's probably more about list control than list delete)
Full Control = Contribute + Permissions control
Just like it has been for years.
- Salvatore BiscariMay 14, 2017Silver Contributor
Deleted JamesR
Couldn't the problem be solved simply unchecking "Allow members to share the site and individual files and folders" in Access Requests Settings?