InfoPath Dev

I am developing an InfoPath/Sharepoint form library and would like to limit the forms users see based on their security roles. For example, imagine a library of employee evaluation forms. I want employees to see only evaluations they fill out, managers to see _only_ their employee's forms, and human resources to see all forms.

The roles can be set up in Active Directory, and the information (ie manager id) stored as part of the form.

How would one best go about implementing this in Sharepoint?

Hi Dan,
I wouldn't use SharePoint for this since it will be a configuration nightmare (what happens when an employee changes managers, etc.). I'd use a Web service and SQL (or just do e-mail for now). We have a Web service (Database Accelerator) that supports easy connection to a SQL database. We have some limited roles-support now and are adding more for a June release. This probably doesn't fit in your timeline, but it's quite a bit of work to do this on your own. SharePoint doesn't currently support fine grained per document permissions. There is better support coming later this year (or so I have heard). I would do it in e-mail for now. That's simple and cost effective.

Patrick Halstead [InfoPath MVP]
InfoPathDev

Ok. A custom webservice and data store was the direction I was headed, just wanted to make sure I wasn't missing something in Sharepoint.

I did see an article here (after posting), about using the [Me] filter to filter the default view. This seems like it would provide some of the functionality, like "list all forms that [Me] created", but not more complex scenarios, like "list all forms for employees that [Me] is manager for." Any thoughts on using that feature?