I have the following problem that needs a solution: We have a number of site collections where we would like to enforce particular security settings. We'ld like to have a solution that automatically runs every <period of time, probably weekly> to reapply the security settings according to it's security template setup. A typical security setup for a site collection would be:
Visitors (typically, all authenticated users) have read (or in some site collection cases, contribute) rights and all site collection members (typically, one or more AD groups) have design rights to the site collection, with the exception of the subsite node/branch that is called "private" (as in /sites/sitecollectionA/private). Starting at the root of the /private subsite collection, only the sitecollection members have read rights, and only the site collection owners have design rights. Every time the solution runs, it should reapply the rights, as set up in the security template for the given site collection, to that site collection.
Here's a possible kicker though: The security template for a given site collection would be maintained by a sysop not much familiar with Sharepoint nor its intricacies - they would be editing it to enforce a particular security context they were told to implement....would it be possible to create an adjunct program that would read the existing security template, facilitate the changes the sysop needs to make, then output and apply the appropriate security template to the site collection?
Thanks!