Forum Discussion
MC186626 - Updated Feature: Joining SharePoint hubs can be performed by site owners
Hello All,
I reviewed MC186626 - Updated Feature: Joining SharePoint hubs can be performed by site owners.
Previously, associating with a hub site required site collection, admin privileges.
We are updating this permission so site owners can associate their sites to a hub.I'm concerned that site owners could associate their sites to a Hub that is not theirs to associate with.
Does anyone know if it is possible to prevent non-site collect admin from associating to Hub sites?
Is anyone else concerned about this as well?
Thanks!
Norm
4 Replies
As admin, you can specify who can associate sites with the HubSite. But think about this, even if they can associate the site to the HubSite, if they don't have access to the HubSite content they can't see any files. But they will be able to see all the HubSite menu (Top Menu)
Thanks for responding. I understand your point.
My primary concern is that a site owner will associate their site to our intranet and by doing so will include their content in any intranet search results. This could lead to misinformation being consumed by end users.
Maybe I'm missing something with this announcement but I am still concerned.
Thanks again for responding. I appreciate it.
Norm
- Search is security trimmed, so just because a site is joined to a hub doesn't mean that anyone will be able to see something they shouldn't - associating to a hub doesn't change site permissions.
