Folks accessing folders/files on Sharepoint Online by searching when folders/files are locked down!

Shane Siegfried 0 Reputation points
2024-08-21T23:16:02.81+00:00

I have come across a very odd situation today and im hoping someone can help me out.

I am the admin of our Sharepoint Online site at the company i work for and i was made aware of an issue that has probably been happening for a while now and i need to resolve it ASAP!

I only give access to folders/files upon request so that folks cant access things that either have nothing to do with them or if they are very private things like accounting stuff for example.

Apparently by simply using the search bar at the top, folks can find whatever they want, then access said item they searched for even though they do not have normal access to the item, whether its a folder or a file.

How is it possible that the search bar is overriding the permissions for folders/files?

Ive gone through the admin portal and i cant find anything that would allow folks to simply search for a folder/file, access it and edit it if they wanted!

Hopefully someone here can help me out!

Thanks in advance!

SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,797 questions
SharePoint Workflow
SharePoint Workflow
SharePoint: A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.Workflow: An orchestrated and repeatable pattern of business activity, enabling data transformation, service provision, and information retrieval.
599 questions
{count} votes

1 answer

Sort by: Most helpful
  1. AllenXu-MSFT 20,966 Reputation points Microsoft Vendor
    2024-08-22T06:32:58.0133333+00:00

    Hi @Shane Siegfried,

    I'm sure that SharePoint Online search results only show content that a user has permission to see. Is it possible for users to obtain permissions in other ways besides what you grant in your organization? You can have a test, for example, there is a file A which the user shouldn't have access but shown in the search result. Check the permissions user has to file A via Manage Access >> Advanced settings >> Check Permissions.

    User's image

    If the user has other permissions to the file, someone else in your organization must have given him the permissions.


    If the answer is helpful, please click "Accept as Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.