In my team, we implemented some UI to set user access rights (assign/revoke permission levels) on a certain SharePoint list. The UI supplies a "undo" feature: If you change the rights over the UI, you can restore the rights the user had before by clicking "undo".

Now there is a problem if the user had the "Limited Access" permission level: This permission level is removed when you do a change over the UI. When trying to Undo, the permission level should be added again, which leads to a

You cannot grant a user the limited access permission level.

I've read that SharePoint grants that right automatically when a user gets access to some entity beneath the site. Still I can revoke the right manually, but then I cannot re-grant it.

Is there a proper way I could work around that?

My thoughts:

• Did I get it right that this "limited access" is granted by SharePoint on the site level only?
• So, do all the lists beneath the site only contain that permission level "accidentally" because they inherit it?
• Does that permission level have any effect at all on a list, or does it only apply to the site itself?
• So, would it be save to just remove it from a list and do not add it anymore when the user clicks "undo", since it has no effect anyway? (My UI always works on list / list item level, never on the whole site/web).