Mastering Windows® SharePoint® Services 3.0

11.6. Planning User Access

SharePoint user access takes a considerable amount of planning. Security starts at the web application level, affecting user access with permissions and policies. Then the effect trickles down to the site collections, sites, lists, and even list items. The top levels can affect the permissions and security of the lower levels, so it's a good idea to know what settings are where when you are responsible for SharePoint authorization.

Authorization, not Authentication Remember that permissions are all about authorization, and control what a user is permitted to do on the site. Authentication has nothing to do with permissions as they pertain to SharePoint.

11.6.1. User Access at the Web Application Level

The first ...