As I am testing the impact of different settings in user policies I came across several errors I would like to share.
If you deny “Manage Lists” in “List Permissions”
and then want to create a new webiste you get this.
If you clear both checkboxes (grant and deny), it works.
If you grant all rights but deny “Add items” on List Permissions
you won’t be able to create new sites bases on Team Site Template:
But new libraries and other site template will work. Ah .. so I have not tested all the templates, only Blog, Document Workspace, Blank Site, Group Work Site.
So, you see it’s not easy to find out which combinations of single permissions will work. If anybody knows a good documentation of reasonable settings, let me know!