Enterprise Wiki OOB lists and their permissions

I found myself looking for an overview of which lists have unique permissions within an Enterprise Wiki page and what those permissions are.

What follows is a complete list of all lists, catalogs and libraries that have unique permissions and what permission levels they are. Group names are to the left, relative urls for lists accross. Data was extracted from the root web of a new Enterprise Wiki site collection.

Web-relative
URL
OwnersVisitorsMembersStyle Resource ReadersDesignersHierarchy ManagersApproversRestricted ReadersQuick Deploy Users[Everyone]
Cache ProfilesReadReadReadRead
DeviceChannelsFull ControlDesign
_catalogs/masterpageFull ControlReadContributeReadDesignReadReadRestricted
Read
Notification PagesFull ControlReadContributeLimited
Access
Quick Deploy ItemsFull ControlReadContributeRestricted
Read
Limited
Access
Contribute
Relationships ListFull ControlReadContributeLimited
Access
SiteCollectionImagesFull ControlReadContributeReadDesignReadReadRestricted
Read
Style LibraryFull ControlReadContributeRestricted
Read
DesignRestricted
Read
Restricted
Read
Restricted
Read
PublishedLinksFull ControlReadReadReadDesignReadReadRestricted
Read
Lists/TaxonomyHiddenListRead
Translation PackagesFull ControlReadReadRead
Translation StatusFull ControlReadRead
Variation LabelsFull ControlReadContributeLimited
Access
_catalogs/users
Lists/ContentTypeSyncLog
IWConvertedForms
Long Running Operation Status

Below is the list of SPBasePermissions used for each of the permission levels.

Permission LevelSPBasePermission set
Full ControlFullMask
DesignViewListItems,
AddListItems,
EditListItems,
DeleteListItems,
ApproveItems,
OpenItems,
ViewVersions,
DeleteVersions,
CancelCheckout,
ManagePersonalViews,
ManageLists,
ViewFormPages,
Open,
ViewPages,
AddAndCustomizePages,
ApplyThemeAndBorder,
ApplyStyleSheets,
CreateSSCSite,
BrowseDirectories,
BrowseUserInfo,
AddDelPrivateWebParts,
UpdatePersonalWebParts,
UseClientIntegration,
UseRemoteAPIs,
CreateAlerts,
EditMyUserInfo
EditViewListItems,
AddListItems,
EditListItems,
DeleteListItems,
OpenItems,
ViewVersions,
DeleteVersions,
ManagePersonalViews,
ManageLists,
ViewFormPages,
Open,
ViewPages,
CreateSSCSite,
BrowseDirectories,
BrowseUserInfo,
AddDelPrivateWebParts,
UpdatePersonalWebParts,
UseClientIntegration,
UseRemoteAPIs,
CreateAlerts,
EditMyUserInfo
ContributeViewListItems,
AddListItems,
EditListItems,
DeleteListItems,
OpenItems,
ViewVersions,
DeleteVersions,
ManagePersonalViews,
ViewFormPages,
Open,
ViewPages,
CreateSSCSite,
BrowseDirectories,
BrowseUserInfo,
AddDelPrivateWebParts,
UpdatePersonalWebParts,
UseClientIntegration,
UseRemoteAPIs,
CreateAlerts,
EditMyUserInfo
Limited AccessOpen,
BrowseUserInfo,
UseClientIntegration
ApproveViewListItems,
AddListItems,
EditListItems,
DeleteListItems,
ApproveItems,
OpenItems,
ViewVersions,
DeleteVersions,
CancelCheckout,
ManagePersonalViews,
ViewFormPages,
Open,
ViewPages,
CreateSSCSite,
BrowseDirectories,
BrowseUserInfo,
AddDelPrivateWebParts,
UpdatePersonalWebParts,
UseClientIntegration,
UseRemoteAPIs,
CreateAlerts,
EditMyUserInfo
Manage HierarchyViewListItems,
AddListItems,
EditListItems,
DeleteListItems,
OpenItems,
ViewVersions,
DeleteVersions,
CancelCheckout,
ManagePersonalViews,
ManageLists,
ViewFormPages,
Open,
ViewPages,
AddAndCustomizePages,
ViewUsageData,
CreateSSCSite,
ManageSubwebs,
ManagePermissions,
BrowseDirectories,
BrowseUserInfo,
AddDelPrivateWebParts,
UpdatePersonalWebParts,
ManageWeb,
UseClientIntegration,
UseRemoteAPIs,
ManageAlerts,
CreateAlerts,
EditMyUserInfo,
EnumeratePermissions
Restricted ReadViewListItems,
OpenItems,
Open,
ViewPages
Restricted Interfaces for TranslationOpen,
UseRemoteAPIs
ReaderViewListItems,
OpenItems,
ViewVersions,
ManagePersonalViews,
ViewFormPages,
Open,
ViewPages,
BrowseDirectories,
BrowseUserInfo,
AddDelPrivateWebParts,
UpdatePersonalWebParts,
UseClientIntegration,
UseRemoteAPIs,
CreateAlerts,
EditMyUserInfo

The data was extracted using the following LINQPad script:

 

Leave a Reply

Your email address will not be published. Required fields are marked *