SharePoint Security Concepts

Security is a hot topic these days and it is clear that the data need to be protected. At the same time, an amazing amount of data remains largely unprotected. Why? If you read this article that might agree with me that is (still) too complex to implement security strategies. The good news is, however, "Security and SharePoint" is not equivalent to "Mission Impossible".
SharePoint 2007 comes with a lot of important new security concepts and features. Much of the credit actually goes to the ASP.NET team who delivered many of the concepts that now shine in SharePoint 2007.
As with SharePoint administration in general, the security settings in SharePoint 2007 is the responsibility of different groups of people at different levels. IT managers determine which authentication and security policies are in effect as part of the overall server configuration. They also need permission to set up shared services farm. Separately below, the site collection administrators and site owners to manage the content approval. Both are equally important, as the best security measures will fail if a content management system accidentally gives you access to the wrong person. Therefore, even audits and records are important to control use, and to identify gaps and errors in the overall configuration.
One of the great steps forward with security in SharePoint 2007 are "fine-grained permissions. This means that permissions can now be set even at the "point", for example, individual documents and folders within a library or list. This enables existing groups, roles and users enough concept, ie it makes it much easier to make exceptions, and to give (temporary) access to a single document without changing the general safety rules.
At first glance it might seem strange that SharePoint, by default, it installs a collaboration portal with security enabled, instead of a web site with anonymous access. From a security posture that point, of course, has total sense. Microsoft even went a step further: even when anonymous access is enabled by default, access is very limited. Document creation and management is completely impossible with anonymous access.