Hi, all.
We found that security was "troubling". You do, indeed, need to give more access than you would want. It boils down to the fact that total available seats counter must be modified by people who register or de-register for a course. In order to enable that, people need read/write access to the course itself. That, unfortunately, gives them the ability to change the course, which does not excite the course manager, but is manageable.
We set up two permission levels. We named the first "IT Course Taker - Register for Courses" with list permissions:
- Edit Items
- Add Items
- Delete Items
- View Items
- Create Alerts
- View Application Pages
Site permissions:
- View Pages
- Open.
We associated this permission with the task list: "Registrations"
The second was "IT Course Taker -- course updates" with permissions:
-
Edit items
-
View Items
-
Create alerts
-
View application pages
Site permissions:
We created a group called "Training Site Visitors" whose members are "all authenticated users" and then gave that group privileges for these lists:
Courses: IT Course Taker -- course updates
Registrations: IT Course Taker - Register for courses
Past Registrations: Both perms.
I think I covered it all. Let me know how you all make out.
Paul J. Galvin
SharePoint Solution Architect
Conchango