Weird Permissions Issue in SharePoint

Question

My SharePoint site uses Active Directory authentication. The Site Visitors SharePoint group contains the AD group of all users.

I have a subsite which Site Visitors have Read access to. Inside this subsite, I have a document library which I don't want visitors to have read access to and so I have made the permissions unique for this document library only and only allowed 2 explicit users to have access to it.

Despite this, I can still come onto the site as a Site Visitor AD user and navigate to this document library and read the files inside.

Any idea what's going on here? I should be able to lock down lists and doc libs like this shouldn't I?

Hope someone has seen an issue like this before. Are there any pages I can view which show me what users/groups have permission to this document library other than the standard Permissions one?

Thanks

Graeme

Answer 1

You might need to try out the Permissions Reporting Tool just today new version has been released.

Answer 2

Hey there, I'm Kevin and I work on SharePoint permissions

If the users are site collection administrators, they will have access to the list regardless of the permissions set.