Sharepoint libraries, workflows and item level permissions

[clareq]

I've been asked to create a form library, with associated workflow, for staff absence. I have done so, but I have now been asked to set the permissions so that people can only see the forms they have submitted, and not those of other people in the library (there is an added complication of line manager, but I'll deal with that later!)

 

I know I can add item level permissions in a list, but the workflow won't work then. I've created a 2013 workflow, does anyone know if I can add a stage to the workflow so I can maintain confidentiality?

[apearce]

If you go to list settings and into Advanced Settings there is an option there to only allow users to see and/or edit their own items. If you set this to only being able to edit their own but can see all then you can use a filter where Created By = [Me] on the views you want to control.

 

Edited November 14, 2017 by apearce

[clareq]

That setting is there for lists, but not libraries.

[bald_pig]

We use a workflow to apply permissions when the item is created.

[clareq]

How do I do that? I can't see anything to do with permisisons in Sharepoint Designer 2013.

[bald_pig]

You have to use an impersonation step IIRC.

[clareq]

I think I've sorted it - I was making it too complicated. I've created a new view, where "Show items only when the following is true: Created by is equal to [Me]" is set. I've set this as the default view, and deleted the All documents view. The workflow has links to individual documents in the e-mail body, so Line Managers and HR can access the documents that way. Only people with the appropriate permissions can create views.

[bald_pig]

I think I've sorted it - I was making it too complicated. I've created a new view, where "Show items only when the following is true: Created by is equal to [Me]" is set. I've set this as the default view, and deleted the All documents view. The workflow has links to individual documents in the e-mail body, so Line Managers and HR can access the documents that way. Only people with the appropriate permissions can create views.

 

The problem there is that anyone can create their own view, so the potential to bypass the restrictions.

[clareq]

Then I'll look further at impersonation steps, though I can't find them yet!