Table 1: SharePoint Security Surfaces
Surface Name	SharePoint Portal Server	Windows SharePoint Services	Description
Area	x		A SharePoint Portal Server page and supporting pages derived from a SharePoint Portal Server site definition. This element can support subareas. Security is applied to an area and can be inherited by subareas.*
Document Libraries		x	A type of SharePoint list that supports the creation and uploading of content and the ability to assign and customize metadata to associate with the list and its content.
Document Workspace (subweb)	x**	x	A SharePoint Portal Server or Windows SharePoint Services page and supporting pages derived from the document workspace template or site definition. Typically used to collaborate on content creation.
Other List Types		x	All other lists, including custom lists that support metadata customization. In many cases, you can also attach content to Windows SharePoint Services lists.
Other Workspace types (subwebs)		x	A Windows SharePoint Services page and supporting pages derived from a workspace template. Each template serves a different business function.
Sites		x	A Windows SharePoint Services page and supporting pages derived from a site template or site definition. Each template serves a different business function. Subsites and workspaces can be created below a Windows SharePoint Services site.
* The only exception to where you apply security for an area is the home page area at the top of the SharePoint hierarchy. The home page area inherits the permissions assigned from Site Settings-Manage Users. ** At the SharePoint Portal Server level, you can create a Document Workspace only off the home page. You can’t create a document workspace in a subarea, even though the context menu in SharePoint Portal Server shows this option (as Figure 3 shows). This documented SharePoint Portal Server limitation has been confirmed with Microsoft Product Support Services (PSS).