Anonymous Access to Document Libraries
This one is pretty peculiar.
If you allow anonymous access in IIS and you allow anonymous access in your web app's authentication provider (in CA Application Managment) you can set Anonymous Access on the site's Advanced Permissions page by selecting Anonymous Access from the settings menu.
If you select Nothing, when you select the Anonymous Access option from your doc library permissions' Settings menu, the Change Anonymous Access Settings page displays but all the options are greyed out.
So, let's say you go to your site's Advanced Permissions and select Anonymous Access from the Settings menu and select Entire Web Site.
Now, when you look at the permissions for a list you can select Anonymouse Access from the Settings menu and you'll get a Change Anonymous Access Settings page with four options: Add, Edit, Delete, andor View.
But if you look at the permissions for a document library, when you select Anonymouse Access from the Settings menu, you'll get a Change Anonymous Access Settings page with four options: Add, Edit, Delete, andor View but the first three are greyed out.
Does this mean that anonymous contributions to document libraries are not possible with WSS?
I guess it does. If you look here: http://office.microsoft.com/en-us/sharepointtechnology/HA101130181033.aspx?pid=CH100649861033
You notice the Note at the bottom: Note Only the View Item permission is available for libraries. This is to help protect your site from potential script injection attacks.
Great, another elegant solution squashed by overbearing security.
-robot
Tags: