InfoPath Form Library Security Configuration

In order to restrict access to users only being able to see their own records, that is, the records that they created:

1) They must not be able to create personal views (group permissions in SharePoint)

2) The library must not be searchable

3) The default view must be filtered on created by [me]

4) The other default views must be deleted in SharePoint Designer.


This also applies to any document library in MOSS 2007. I have found that this is the only option for my particular implementation since a Custom List in MOSS will not accept attachments from Safari on Mac OSX













Above is the default views that are created by the system. Below are the views that you should leave.












The next step is to remove the personal permissions for your users. They will not have the option to create or edit any views.

From the form library settings page, advanced settings section, choose "No" to "Allow items from this form library to appear in search results?"


Issues and Risks:

By destroying the existing views, which cannot be recreated (or at least not easily recreated) functionality will be lost, i.e. merging of forms, re-linking documents, and Explorer view.

Also, a savvy person could guess what the URL for a specific form is, and will have access to it since there is not any deny permissions in this library. I used a concat(Field X, "-", now()) to create a time stamp. That will make it very difficult to guess what the URL to the file is.