Recently when I was teaching a SharePoint Site Collection Administrator course, I had a learner that just could not wrap their brain around the idea of collaboration and sharing information. Often this is the case. I feel for that SCA because they were tasked with "locking" it down so only certain people were able to access the sites and the libraries creating a nightmare to manage.
Now, you can use groups and have all the governance and documentation, but that is not what SharePoint is about. SharePoint is named SHARE Point, not LOCK point, therefore it was designed to be used to SHARE information. It was rumored to be the codename of "Office Server" but when you look the name describing the product, they hit the Point...
So when using and managing permissions, sit back and think... If I am going to lock it down, should it be in "SHARE Point?"
