Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
1answer
11 views

Permission levels based on terms

I'm new to SharePoint (working with SP 2013 Enterprise on-premises) and have a question. Consider we have several privacy levels stored in a termset and a SharePoint list. Privacy term is a field of ...
0
votes
0answers
9 views

Blocking the standard SQL Server ports and installing share point 2013 for Internet sites is good idea?

We have plan to deploy our organization internet portal , -our all sharepoint 2013 and SQL SERVER s are in DMZ zone for sql server security i am following Configure SQL Server security for ...
1
vote
2answers
12 views

Security and backup if documents in library are not synced

Is there any reason why I would not want to store all of my business documents and not sync them? Should I have any concerns about security or losing data? I don't need to have my documents synced ...
0
votes
0answers
11 views

Encrypting files and documents in Sharepoint 2013

I want to host confidential data on Sharepoint 2013 and would like to encrypt these data on a file level. There is already a Transparent Data Encryption (TDE) feature available for Sharepoint but it ...
1
vote
1answer
43 views

what need to be done when we change the manage account password from the Active directory

We have changed the passwords for the SP manage accounts inside our active directory. So I login to the SP server, then i changed the application pool identify passwords accordingly. Then I went to ...
0
votes
1answer
53 views

Item-level Security on SSRS report from SharePoint list

We have created an SSRS report from SharePoint 2010 list. We have item level permission in the source list, so the user can view only the items for which they have privilege. But in SSRS report it ...
0
votes
0answers
26 views

Filter on Views don't work after update 2956175 is applied on SP2013 env

We have applied Filter on a task list view on the Assigned To column. This was working fine. Last friday we installed the Security patches available from Microsoft published on 3/10/15. Immediately ...
0
votes
0answers
13 views

Assign Permissions to Document on Upload Workflow

I am using SPD 2010 and I am wondering if the following workflow is possible: I would like to have a workflow that when a document is uploaded by a user, the workflow assigns read permissions to that ...
1
vote
1answer
63 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
1
vote
0answers
20 views

Allow access to enter data , but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
0
votes
1answer
30 views

Error : Group cannot be found

I deleted Team Site Owners group from the top level team site in SharePoint Online and found that the people and groups link from the settings page is not working, throwing an error: Group cannot ...
0
votes
0answers
27 views

Connecting using SSRS Report SharePoint list datasource - Windows Integrated Security doesn't work

I have a report I'm building using SSRS and a SharePoint List as datasource. The report works ok only if I login with my credentials before viewing the report. My credentials do not pass automatically ...
1
vote
1answer
22 views

Different URLS for different auth providers, under one web application and site collection

We have a single site collection setup within a web application. The site collection has one top-level site, and the setup has one content database. The application is using Forms authentication for ...
1
vote
0answers
27 views

SharePoint setup where admin has no access to data

We have a customer who want's to store sensitive data on SharePoint which should only be accessed from a few members of the company. This would be no problem with SharePoint group policies, but we ...
0
votes
1answer
35 views

Restrict permissions/access to list items in code

Does anyone know a way to restrict access to list items in code, even if someone has full control on a list item, deny that in code. I know there is a way for updating using event receiver, but I'm ...
1
vote
1answer
41 views

Security Exception when calling WCF Service from Sharepoint 2013 Visual webpart

Want to call WCF service from Sharepoint 2013 Visual Web Part; when using this Service from Console it works perfectly. I receive following Security Exception when using svc from webpart: Request ...
0
votes
1answer
28 views

SP2013 unknown reason for access issues

I added an AD user to group "Site Members" in a SharePoint 2013 application. Group "Site Members" has Contribute permissions at the site root, and there are no restrictive permissions listed when ...
0
votes
1answer
11 views

Security Domination

Does Lower / Weaker Security Rule over Higher security or Vice Verse? E.g. A User wants to Edit a list and has the following permissions across two groups: S1 - View Only S2 - Full Access Which ...
0
votes
0answers
28 views

SharePoint “FormDigest”/“RequestDigest” and Cross site scripting attack

So "formdigest"/"requestdigest" in SharePoint is basically a security token used to tell SharePoint that the POST request that has come to the server is from a authenticated,legitimate user. ...
0
votes
0answers
26 views

Web API / SharePoint

In an attempt to abstract the process of accessing SharePoint data, I would like to create a Web API application that can run server-side code (think, SP objects). What are some best practices for ...
0
votes
1answer
26 views

How can I block USB port access with certain permissions on Sharepoint?

Is this at all possible? I've been told to do it and do not know how. I'm using Sharepoint 2010
0
votes
1answer
32 views

Microsoft Office credential prompts

Microsoft Office applications prompt for user credentials when associated file types are loaded from SharePoint (xlsx, docx, etc). Is there any way to pass through the Windows login credentials so ...
0
votes
0answers
114 views

Refresh Trusted Security Token Services Metadata feed timer job fails on search server

I'm running SP 2013 with 7 servers in my farm. One of my search servers (I have two) fails this job daily at 12AM? Any ideas? I get the following three errors in the ULS log when this job fails. ...
0
votes
1answer
45 views

How do I restrict access to System Pages?

I want a user group to only be able to access our published front-end site. How can I prevent these users from accessing System pages? For example, I don't want them to be able to access ...
0
votes
1answer
31 views

Auto setting security settings of a subsite using workflow

I am wondering if it is possible at all to edit site permission settings using workflow? I work for a consulting company who takes small projects from various clients and wants to move their ...
6
votes
1answer
240 views

Is the “Keep me signed in” in SharePoint Online a security flaw?

We are considering replacing our on-premise SharePoint intranet with SharePoint Online. I won't spell out the advantages, but I can see one big disadvantage - the "Keep me signed in"-button... Our ...
0
votes
0answers
8 views

Account on web application level no access to site

I have added an account (central admin > web application > policy for web application) to the list on all zones, with full control I now try to logon with that account on a site in a site ...
0
votes
1answer
74 views

Allow others to see picture, but deny access to mysite

We are sharing parts of our SharePoint 2013 enterprise site with our customers. Security-wise this can be managed pretty well, but I have one problem. Customers do see employee photo & names (next ...
2
votes
1answer
70 views

Total number of unique permissions per list

The http://technet.microsoft.com/en-us/library/cc262787.aspx specifies the total number of unique security scopes to 50.000/list, but recommended is 5.000/list. In a list, is it possible to find out ...
0
votes
2answers
40 views

Who sees a private list

If I set the option of "Read items that were created by the user", who other than the user can still view it? Where can I restrict the list of people who can still view it?
0
votes
0answers
153 views

How to display custom ContentBySearchWebPart results without security trimming?

I have a custom web part extending the ContentBySearchWebPart class to list all communities that the user isn't member of. I need the results not to be security trimmed, meaning all authenticated ...
0
votes
0answers
16 views

add a statement reminding users the information inside the folder is for internal use only

I have file which needs to add a statement reminding users the information is for internal use only. Is adding this statement possible to read each time the file is opened? The file has a 100 ...
0
votes
0answers
9 views

Grant third party access to sharepoint ribbon without disclosing users

Dear smart people out there, I would like to grant a third party access to the SharePoint ribbon without disclosing the identity of our users. Is this possible? How?
1
vote
0answers
95 views

Data Refresh Account - Login Failure: the user has not been granted the requested logon type at this computer

I am trying to configure my Unattended Data Refresh Account and continue to get the following error with the account I am using: The data refresh for 'sqltestrefresh.xlsx' on Report Center - QA ...
2
votes
1answer
139 views

SharePoint won’t report active directory domain user permissions inherited from active directory domain security groups nested in SharePoint groups?

For instance: ads\mdepnorm aka MDEP TSST Norman Testing is in SP-CONTRIBUTORS ADS security group: . The sp-contributors ADS group is in SharePoint group Intranet Members: . It follows that if I ...
1
vote
1answer
32 views

Managing Site Permissions

I am new to SharePoint and having some difficulty setting up the appropriate permissions. My organization uses a primary landing page that only a few have Owner/Full Control rights to, and then that ...
0
votes
1answer
109 views

Can Forms Based Authentication be Used on Site Collection?

Is it possible to use forms based authentication/.net security for a site collection? I can see where I can configure a web application for FBA, but not for a site collection, which in my case is a ...
1
vote
1answer
35 views

system security error when running Sharepoint 2010 Products Configuration Wizard

Background: A few months ago, my company had an issue which resulted in creating a new domain, and migrating all computers and servers to the new domain, including a Sharepoint 2010 installation. At ...
0
votes
1answer
197 views

when i changed the IIS application pool's and sharepoint services's Service Account i start receving the following error “403 FORBIDDEN”

For security reasons we wanted to chnage the service accounts username for all the IIS application pools and SharePoint service , so we created a new user named "Staging.user", and i define it as a ...
0
votes
0answers
34 views

get error when adding a user to a group site permissions - SharePoint 2010 on premises

I need some help here . Not sure if anyone as gone through this before. But when i try to add user to a group or to anything in sharepoint via site permissions i get an error and a coreelation id. I ...
1
vote
1answer
24 views

HR Libraries Scenario >> Employee libraries and security via AD

We have a scenario in 2013 where we are proposing a library per employee to hold HR documents. We'd have a dropoff library that would route the document to the proper library which is based off the ...
0
votes
0answers
64 views

Restricting List View Based on Document Library Permissions

I'm looking to restrict a user from accessing certain list data if they do not have access to a related document library and was hoping to get a couple opinions on the best way of doing such. Here's a ...
0
votes
2answers
387 views

Sharepoint 2013 web part does't impersonate current user, while SP 2010 does?

I'm developing full trust web part deployed in GAC that access soap web service on localhost. Web service uses windows authentication. SP 2010 web part impersonates current user while SP 2013 sends ...
0
votes
0answers
376 views

Share a folder (break inheritance), access denied

I have a problem in Sharepoint 2013 which is reproducible. Create a document library on any site. Create a folder in this library. Break inheritance on this folder and add a user that doesn't have ...
0
votes
0answers
22 views

SharePoint data / document encryption options: experiences and recommendations

I'm evaluating the options to implement an encryption of the data / documents that are saved in SharePoint (2013). The important requirement is that SharePoint administrators (farm admins) are not ...
0
votes
0answers
127 views

IE default security settings block any App scripts from running

I wrote a Sharepoint-hosted app for use by a single company. But in order for my javascript to execute on their local intranet, which uses Microsoft Windows Server 2008, I have to instruct them to ...
0
votes
1answer
190 views

User Authentication in Sharepoint and OTP

Currently we have SharePoint installed in our production environment. We are only on intranet currently, but we would like to make our SP accessible from internet and web URLs. Currently for ...
0
votes
0answers
156 views

FBA Active Directory Security Groups Not Working SP 2013

So I have in active directory one security group, lets call it "Shrpt_Users". Within SharePoint I have granted this Active directory group read rights to my sub site: "Advertising". My user ...
0
votes
0answers
31 views

Users with no permissions can still see empty list views

I have a problem regarding security on lists. If I break role inheritance on lists and exclude users from having access to that specific list, the users are still able to navigate to the list and ...
0
votes
0answers
31 views

Folder permissions

I have a problem where I need to allow access to a folder to a select group of people where the folder is buried deep within a series of folders. For example Folder A (top level | ---->Folder ...