Sharepoint Security Breach

[Amanda M]

We are using Microsoft Project Server 2003. We wanted to utilize the survey
feature within Sharepoint for Project Closeout information. We set up the
survey, added users with specific roles and sent out an email link to connect
to the Project's Sharepoint website to fill out the survey. Strangely, users
assigned team member and contributor role types were able to view all
responses to the survey. We discovered that the link we sent was not just to
the homepage but to the "modify survey and questions" page ( http://server
name/imt/project_###/Lists/ Survey%202007/overview.aspx) and not just to
(http://server/imt/project_###) So our fault for sending out the incorrect
link. HOWEVER, shouldn't Sharepoint have denied team members and
contributors from accessing this page?

 

[Amanda M]

I discovered the problem. The general settings on the survey on the
sharepoint website should be set to allow no one to see other responses. I
find it interesting that this function is stored in general settings when
this should be attributed to security rights. Anyway. We are successfully
using surveys.