Forum Discussion
Customize Search Results per permissions
Hello all, I have been facing an issue. I have installed an addon to allow me to integrate Sharepoint with Confluence. https://communardo.atlassian.net/wiki/spaces/KB/pages/27687399/SharePoint+sites...
Well the idea is I'm using an admin account that has access to all sites and documents to get all the content from Sharepoint by crawling.
afterwards I want the users including me as an IT who uses the search to view only the content they have access to without seeing the documents from another departments.
e.g. an Accountant from Finance site can only find documents from Finance without being able to see HR documents on the search.
as for some reason after enabling the search even though I do not have access to lets say "Marketing" site I still see all their documents on the search and if I click on the search results it will take me to the file on word online and I can view and edit the files without having this permission on Sharepoint. which is a huge security flaw if that's the case or something is seriously wrong with the implementation with office online.
I know I can exclude some sites from being crawled into but I want to have the flexibility that won't require me to do everything manually such as changing the settings every time a new site is created, a new document library is created or new users joining.
afterwards I want the users including me as an IT who uses the search to view only the content they have access to without seeing the documents from another departments.
e.g. an Accountant from Finance site can only find documents from Finance without being able to see HR documents on the search.
as for some reason after enabling the search even though I do not have access to lets say "Marketing" site I still see all their documents on the search and if I click on the search results it will take me to the file on word online and I can view and edit the files without having this permission on Sharepoint. which is a huge security flaw if that's the case or something is seriously wrong with the implementation with office online.
I know I can exclude some sites from being crawled into but I want to have the flexibility that won't require me to do everything manually such as changing the settings every time a new site is created, a new document library is created or new users joining.