If you have worked on MOSS 2007 then you can imagine how difficult it was to get all the permissions granted to a particular user across the SharePoint site. The only way was to open all the sites, lists, and libraries and check if user has been granted permissions or not. You also needed to check the permissions granted to all the SharePoint groups and AD Security groups of which this user was a member. To do this job easy, some SharePoint developers developed custom components and a well known example of such tools is "Access Checker" which can be found at http://www.codeplex.com/AccessChecker.
SharePoint 2010 provides a new feature called "Check Permissions" which makes it very easy to find out all the permissions granted to a particular user. This feature is available in both SharePoint Foundation 2010, and SharePoint Server 2010.
You need to follow below steps to check permissions granted to a user using this new feature:
Step-1: Log-in to SharePoint site as Site Owner or Site Admin.
Step-2: Click on "Site Actions -> Site Permissions" to open the site permissions page.
Step-3: Click on "Check Permissions" link in the Ribbon to open the check permission page.
Step-4: Enter the account name of the user whose permissions you want to check and click on "Check Now" button.
Step-5: List of permissions granted to the entered user will be displayed on the same page.
The "Check Permission" feature also have some limitations which are listed below:
- You can use the Check Permissions features to view the permissions for a particular user in the current site and all subsites that inherits permissions from the current site. It will not shows the permissions for subsites which are created with unique permissions.
- It will not show permissions assigned to AD security groups. For example, if a user is a member of a AD security group, and that group is granted Contribute permissions, then Check Permissions will not show it.