Question

After document approval, i want set it to a final status where newer version of document cannot be uploaded or any modifications made (i don’t care if it is downloaded and modified on users PC, but it must stay as is in SharePoint).

I see few options here:

• break permission inheritance and set
  all roles to read only.
• EventReceiver on ItemUpdating/ItemDeleting/ItemCheckingIn and cancel event if my approval status is set to approved.

Breaking permissions would seem more acceptable for me, because the eventreceiver solution will provide error after user tries to make action rather than before it tries to do something. Also it would run on each ItemUpdating event, checking if this document is approved. Which is bad.

But maybe there is just a flag for a file i could use like set it as readonly or final? What would be the best solution here. Solutions which would affect only docx format are also welcome for evaluation.

Answer 1

There is not a really nice solution to this:

• Break permission is the one that looks nice in the UI, but it has the drawback of not staying up to date with new groups of users being added
• The event receiver doesn’t give you a nice UI, but works
• A third option often used is to check out the document using some fake user and letting it stay checked out. (Maybe adding a event receiver to prevent the checkout from being undone). But this is kind of a hack.