Removing Role Definitions from a Role Assignment

Company | Articles & Research | Services | Software |

Our Company

All SharePoint Articles

Security

Development

Accounting / Dynamics

AIS / Dynamics GP

Other

Consulting Services

Freeware / Experiments

Applications	WebParts	Security Components
SharePoint Field Diff And Copy Utility * Written In January, 2012 SharePoint Security Scanner * Written In January, 2012 SharePoint Kerberos Buddy * Written In Feburary, 2011 BioPoint: SharePoint Biometric Authentication * Written In September, 2007 SharePoint List Security Migrator * Written In August, 2007 SharePoint Anti-Keylogger™ * Written In April, 2006 S.M.A.R.T SharePoint™ * Written In May, 2006 SharePoint Sentinel™ * Written In June, 2006 SharePoint Scrubber™ * Written In July, 2006 SharePoint Safeguard™ * Written In August, 2006	SecureSilverlight For SharePoint * Written In January, 2010 Simple Rollup WebPart For SharePoint * Written In Novemember, 2009 SimpleChart For SharePoint * Written In December, 2009 SimpleSecurity For SharePoint * Written In June, 2009 CrytoCollaboration (Encryption) * Written In June, 2007 Sample AJAX Rotator WebPart * Written In July, 2007 Sample SharePoint Redirector WebPart * Written In August, 2006 WFE Server Name WebPart * Written In January, 2006	PDF IRM Protector * Written In December, 2010 ADAM Role Provider * Written In February, 2007 Universal Provider Framework * Written In April, 2007

Contact

Removing Role Definitions from a Role Assignment

Role assignments can be exposed ala ISecurableObject and pretty much everything, in order to support Securable Objects (for item level security,etc.), is an ISecurableObject in SharePoint 2007. So, to begin with, we are going to use ISecurableObject to get assignments in combination with a SPPrincipal (representing a user or group) via the GetAssignmentByPrincipal method available off a RoleAssignments collection (it doesn't even require casting!).

PLAIN TEXT

C#:

SPRoleAssignment assignment = ISecurableObject.RoleAssignments.GetAssignmentByPrincipal(SPPrincipal);

Following, a new SPRoleAssignment object is hydrated based on the SPPrincipal object, and that SPRoleAssignment object has a RoleDefinitionBindings collection that exposes the Remove method. Therefore, if you had an array or typed collection of SPRoleDefinitions you wanted to iterate, you could do something like (of course after testing whether the SPRoleAssignment object created is not null):

PLAIN TEXT

C#:

foreach (SPRoleDefinition definition in List<SPRoleDefinition>)
{
assignment.RoleDefinitionBindings.Remove(definition);
}

Gone! :)

Article Or Research Filed Under SharePoint| SharePoint Development.

2 Comments »

[...] Removing Role Definitions from a Role Assignment [...]

Pingback by Links (3/19/2009 « Steve Pietrek - Everything SharePoint) — March 19, 2009 @ 6:40 pm
A static method would have been more helpful, but the content is still useful.

Comment by James R. — April 14, 2009 @ 8:35 am