Wednesday, May 18, 2011

ViewFormPagesLockDown - Restrict Application-Form Pages in SharePoint

ViewFormPagesLockDown is a SharePoint Feature (not in WSS) that helps us in:

  1. Allows anonymous users to only view the Publishing pages, not any of the form or view pages (DispForm.aspx, AllItems.aspx)
  2. Disallows anonymous access to pages in the _layouts directory that inherit from LayoutsPageBase.
By default all publishing sites have the feature called ‘ViewFormPagesLockdown’ activated, but not on the Collaboration Portal site or Team sites's definition. Without this Feature active on anonymous public sites, any users - including search engines like Google will be able to view (and crawl) SharePoint out-of-box pages which are tied to lists and webs that allow viewing by anonymous users.

Yes, These users might not have the ability to do anything, but you may not want anonymous users to view the form pages.

If you want to place your custom application pages inside the _layouts directory, which anonymous users must hit, there's the UnsecuredLayoutsPageBase class you can use as the base class of your page, and there's always just the Page class as in a standard ASP.Net application page.

To Activate the Feature :
stsadm -o activatefeature -url -filename ViewFormPagesLockDown\feature.xml

If you still get the Form pages visible for the end users, Try: With the ViewFormPagesLockDown feature Enabled, disable Anonymous Access in the site, then re-enable it.
MSDN Link: http://technet.microsoft.com/en-us/library/cc263468(office.12).aspx

Lock down Application Pages in SharePoint 2013:
SharePoint 2013 brought this feature in interface via site feature "Limited-access user permission lockdown mode feature".

Go to Site collection features, activate/deactivate "Limited-access user permission lockdown mode" feature to restrict/allow anonymous users to access application pages.
 Limited-access user permission lockdown mode



You might also like:
SharePoint Usage Reports
Usage reports, collaboration and audit for SharePoint.
Document SharePoint Farm
Automatically generate SharePoint documentation.
*Sponsored


Check out these SharePoint products:

2 comments :

  1. Nice, thanks for information.
    Sad but MS is still pushing us to use stsadm instead of PowerShell in many situations.

    ReplyDelete
  2. But, how do you do this for a user with Full control?

    ReplyDelete

Please Login and comment to get your questions answered!

You might also like:

Related Posts Plugin for WordPress, Blogger...