A small quirk I ran into yesterday.
Typical scenario is there a list on a site (call it ListX) that is on a site
(lets say SiteY). Now typically if a user is given rights to the list and not
the site (i.e. the user has no rights on the site, but is given rights to
ListX), then if the user goes directly to ListX he can view list items. - Thats
not a problem everything is fine and dandy.
What doesnt work is the user cannot call any webservice on SiteY even the
Lists.asmx to retrieve data from ListX.
I initially thought that the SharePoint WebServices might be
considered as Pages, but assigning only the 'View Pages' right for
the user doesnt work either. The minimum right to enable access to the
data seems to be 'View List Items & ViewPages' permission for the whole
Site.