SharePoint Lockdown – Restrict user’s direct access on SharePoint lists and libraries

Scenario – in intranet SharePoint 2010 application i wanted to restrict users who have  ‘Reader’ access on list and library from having direct access on list and libraries pages like allitems.aspx/allpages.aspx/viewlsts.aspx page

Solution: followed below steps against that intranet site

1.       Run below STSADM command from SharePoint server: (perform below for all site collections)

 Stsadm –o activatefeature –url “https://intra.app.co.uk” –filename ViewFormPagesLockDown\feature.xml

Ref article: http://technet.microsoft.com/en-us/library/cc263468%28v=office.12%29.aspx#section6

Example:

 2.       Remove ‘View application pages’ permission from ‘Read’ permission level.

a.       Click on Site Action à Site permission à Click ‘Permission level’

b.      Click on ‘Read’ permission level and Uncheck ‘View Application Pages’ permission from this permission level.

 

Important: Perform #b step for all site collection if you are planning to configure same for all site collections under intranet web application

 

Cheers!!