SPC025501: Do not set 'AllowEveryoneViewItems' to TRUE in ListDefinition

The attribute ListAllowEveryoneViewItems of a ListDefinition should not be set to true, as it allows every authenticated user of the web application to access the list items when the URL is known.

TypeName: DoNotSetAllowEveryoneViewItemsToTrue
CheckId: SPC025501
Severity: CriticalWarning
Type: ListTemplateDefinition
Resolution

The attribute 'AllowEveryoneViewItems' of the SPList object should not be set to true, as it allows every authenticated user of the web application to access the list items when the URL is known.

comments powered by Disqus

Copyright © 2013 RENCORE AB. All Rights Reserved

Disclaimer: The views and opinions expressed in this documentation and in SPCAF are those of the creators and do not necessarily reflect the opinions and recommendations of Microsoft or any member of Microsoft. All trademarks, service marks, collective marks, copyrights, registered names, and marks used or cited by this documentation are the property of their respective owners.

SharePoint Code Analysis Framework, Version 4.5.2.7855, see www.spcaf.com for more information