Hi,
I have two lists (Say A and B - both have unique permissions of "All Domain Users") in an IT Site which is strictly for IT staff viewing only.
I have written some JQuery in a script attached to the Masterpage that read/writes to these lists on separate thread fired off 2 sec after page loaded. The code checks to see if there is an active notification in one of the lists. If there is an active entry it throws up a dialog which requires the user to "Accept" or "Decline". This will then write back to the other list the decline count or if the message has already been accepted.
Problem is I get all non-IT users getting prompted for Credentials. This is due to my REST calls being run on the site where these users have no permissions.
What I want to know is how can I stop non-IT users viewing the site, but allow their masterpage to read\write to these lists. Testing shows that I had to use "Manage Lists" on the IT Site for All non-It Users, but of course I don't want them viewing IT information.
Is only solution to create a separate site for these two lists?
Thanks.
John.