Disable "Allow Editing" option in sharing for users with read-only access in document library

[Bilal Fazli]

Hi Community,

We have faced an issue where users with View Only permissions can share documents with Edit rights other users. We have blocked the "Can Edit" options for read only users from the following share box:

However, users with read only rights can still share documents with other users with "Edit" rights using the following option in office online apps:

We have unchecked the check box for "Allow Editing" box from SharePoint Admin center but can we disable this check box for users who have only "View Only" rights on document libraries?

@Chris McNulty @Deleted @Vasil Michev

[#2]

Hi @Bilal Fazli,

If a user has view only permission, they should be blocked from completing the sharing action. What should happen is that when they don't have permission to share, the system will instead generate an access request and send it to the site owners (it will say something like "Stephen wants to share a file with Bob! Approve or Decline").

If you are not seeing that, please let me know so we can investigate further. Thanks!

Stephen Rice

OneDrive Program Manager II

[#3]

Hi @Stephen Rice,

Thanks for the reply. One correction, users have "Read" rights instead of View only. The behavior you have mentioned is correct and we are seeing the same behavior but with the problem.

Access Requests are generated only when the user with whom the document is shared has no access on the document. Access Requests are not generated when both users (the one who is sharing and the one with whom the document is shared) have already access to the document. In our case, access requests are generated for the later case as well. Is this correct behavior?

Secondly based on my question, is there a way where we can DISABLE "Allow Editing" option for users who have "Read" rights on the library from the sharing dialogue box?

[#4]

 
hey Bilal, Try this out.. It worked for me..

#Connect to sharepoint

connect-sposervice -url https://domain-admin.sharepoint.com

#Check if allowediting option is set to false
get-sposite -identity https://domain.sharepoint.com/<path> | fl

#set it to $true
Set-sposite -identity https://domain.sharepoint.com/<path> -allowediting $true

works for OneDrive as well