SPC020205: Do not set 'AllowEveryoneViewItems' for SPList to TRUE

The property ListAllowEveryoneViewItems of the SPList object should not be set to true, as it allows every authenticated user of the web application to access the list items when the URL is known.

TypeName: DoNotSetSPListAllowEveryoneViewItemsToTrue
CheckId: SPC020205
Severity: CriticalWarning
Type: AssemblyFileReference
Resolution

The property ListAllowEveryoneViewItems of the SPList object should not be set to true, as it allows every authenticated user of the web application to access the list items when the URL is known.

comments powered by Disqus