Tagged Questions

Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
2answers
28 views

Who sees a private list

If I set the option of "Read items that were created by the user", who other than the user can still view it? Where can I restrict the list of people who can still view it?
0
votes
0answers
10 views

Custom ContentBySearchWebPart without security trimming

I have a custom web part extending the ContentBySearchWebPart class to list all communities that the user isn't member of. I need the results not to be security trimmed, meaning all authenticated ...
0
votes
0answers
12 views

add a statement reminding users the information inside the folder is for internal use only

I have file which needs to add a statement reminding users the information is for internal use only. Is adding this statement possible to read each time the file is opened? The file has a 100 ...
0
votes
0answers
5 views

Grant third party access to sharepoint ribbon without disclosing users

Dear smart people out there, I would like to grant a third party access to the SharePoint ribbon without disclosing the identity of our users. Is this possible? How?
0
votes
0answers
16 views

Data Refresh Account - Login Failure: the user has not been granted the requested logon type at this computer

I am trying to configure my Unattended Data Refresh Account and continue to get the following error with the account I am using: The data refresh for 'sqltestrefresh.xlsx' on Report Center - QA ...
2
votes
1answer
38 views

SharePoint won’t report active directory domain user permissions inherited from active directory domain security groups nested in SharePoint groups?

For instance: ads\mdepnorm aka MDEP TSST Norman Testing is in SP-CONTRIBUTORS ADS security group: . The sp-contributors ADS group is in SharePoint group Intranet Members: . It follows that if I ...
1
vote
1answer
24 views

Managing Site Permissions

I am new to SharePoint and having some difficulty setting up the appropriate permissions. My organization uses a primary landing page that only a few have Owner/Full Control rights to, and then that ...
0
votes
1answer
28 views

Can Forms Based Authentication be Used on Site Collection?

Is it possible to use forms based authentication/.net security for a site collection? I can see where I can configure a web application for FBA, but not for a site collection, which in my case is a ...
1
vote
1answer
17 views

system security error when running Sharepoint 2010 Products Configuration Wizard

Background: A few months ago, my company had an issue which resulted in creating a new domain, and migrating all computers and servers to the new domain, including a Sharepoint 2010 installation. At ...
0
votes
1answer
58 views

when i changed the IIS application pool's and sharepoint services's Service Account i start receving the following error “403 FORBIDDEN”

For security reasons we wanted to chnage the service accounts username for all the IIS application pools and SharePoint service , so we created a new user named "Staging.user", and i define it as a ...
0
votes
0answers
17 views

get error when adding a user to a group site permissions - SharePoint 2010 on premises

I need some help here . Not sure if anyone as gone through this before. But when i try to add user to a group or to anything in sharepoint via site permissions i get an error and a coreelation id. I ...
1
vote
1answer
17 views

HR Libraries Scenario >> Employee libraries and security via AD

We have a scenario in 2013 where we are proposing a library per employee to hold HR documents. We'd have a dropoff library that would route the document to the proper library which is based off the ...
0
votes
0answers
30 views

Restricting List View Based on Document Library Permissions

I'm looking to restrict a user from accessing certain list data if they do not have access to a related document library and was hoping to get a couple opinions on the best way of doing such. Here's a ...
0
votes
2answers
94 views

Sharepoint 2013 web part does't impersonate current user, while SP 2010 does?

I'm developing full trust web part deployed in GAC that access soap web service on localhost. Web service uses windows authentication. SP 2010 web part impersonates current user while SP 2013 sends ...
0
votes
0answers
68 views

Share a folder (break inheritance), access denied

I have a problem in Sharepoint 2013 which is reproducible. Create a document library on any site. Create a folder in this library. Break inheritance on this folder and add a user that doesn't have ...
0
votes
0answers
11 views

SharePoint data / document encryption options: experiences and recommendations

I'm evaluating the options to implement an encryption of the data / documents that are saved in SharePoint (2013). The important requirement is that SharePoint administrators (farm admins) are not ...
0
votes
0answers
40 views

IE default security settings block any App scripts from running

I wrote a Sharepoint-hosted app for use by a single company. But in order for my javascript to execute on their local intranet, which uses Microsoft Windows Server 2008, I have to instruct them to ...
0
votes
1answer
70 views

User Authentication in Sharepoint and OTP

Currently we have SharePoint installed in our production environment. We are only on intranet currently, but we would like to make our SP accessible from internet and web URLs. Currently for ...
0
votes
0answers
103 views

FBA Active Directory Security Groups Not Working SP 2013

So I have in active directory one security group, lets call it "Shrpt_Users". Within SharePoint I have granted this Active directory group read rights to my sub site: "Advertising". My user ...
0
votes
0answers
19 views

SharePoint Portal

I am completely new to the SharePoint development environment, though I have experience in VBA. I am attempting to create a SharePoint site that will allow several vendors to view an Excel ...
0
votes
0answers
27 views

Users with no permissions can still see empty list views

I have a problem regarding security on lists. If I break role inheritance on lists and exclude users from having access to that specific list, the users are still able to navigate to the list and ...
0
votes
0answers
27 views

Folder permissions

I have a problem where I need to allow access to a folder to a select group of people where the folder is buried deep within a series of folders. For example Folder A (top level | ---->Folder ...
0
votes
1answer
63 views

Check if a user can read a specified File

I'm working with SharePoint Client API 2010 for a .Net application. I want to check if the current user (or a specified user) can read a specified File? This user could also be in a SP Group or in a ...
0
votes
1answer
40 views

Is it possible to apply device dependent security trimming?

With SP2013, is it possible to apply additional restrictions to what can be viewed by a user using a mobile device (specifically Windows Phone) as opposed to a desktop or laptop? We can assume that ...
1
vote
1answer
74 views

How to manage security for on-prem provider hosted apps that are published to SharePoint Online?

I have a provider hosted app where the web site is running locally (not in azure) and the SharePoint app will be published to SharePoint online. (so user connects to SharePoint online site, clicks on ...
1
vote
0answers
99 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article: ...
0
votes
1answer
57 views

What user executes the code when running SPSecurity.RunWithElevatedPriveleges?

I have done research on this and still can't find a strong answer. Some soures say that when using SPSecurity.RunWithElevatedPriveleges that the code is executed as a site collection admin. Some ...
0
votes
0answers
10 views

Some of ADSecurity groups are not available fro permission

I have two AD Security group, one of the group is available in the Grant Permission page however other security group is not available. Any idea on what makes an ADSecurity group visible to ...
2
votes
1answer
227 views

Question on AD Groups and Sharepoint Groups

I have a security group inside Active Directory called 'Services'. I've added a number of users to the group. I then went into Sharepoint and added that group to the 'Contribute' sharepoint group. ...
0
votes
0answers
282 views

How to read the SharePoint 2010 security log?

{f90exyzy-d84c-4659-abcd-7c1e072a8353} {7cc53188-8ac2-abcd-b251-60768382794a} Site Karthik <test\kart> dem 2014-05-13T15:55:11 Security Role Bind Update SharePoint ...
0
votes
1answer
50 views

Allow users to post comment to a blog in SharePoint 2010 with out seeing the blog

I am currently trying to create a blog on our IT sub site where we discuss various topics. We would like to make it possible that every end user is able to make a post/comment on improvements they ...
0
votes
1answer
110 views

Security Validation Error

I'm trying to create a spweb in page_load via a control on the site. I get the error "The security validation for this page is invalid". I've got a postback (No GET-Request) and also tried ...
1
vote
1answer
244 views

SharePoint JavaScript Object Model Security and Permissions

I am writing an application whose logic executes in the browser using JSOM. The application might have permissions that exceed that of those who access the application. Let's say the application ...
1
vote
1answer
98 views

How to configure security (IIS, token, etc.) for a website that uses SharePoint 2013 REST API?

I have a website that uses the SharePoint 2013 REST API to render list data (via JQuery AJAX) on the website. It is pretty straightforward and works fine, but my challenge is figuring out the security ...
0
votes
0answers
48 views

Web Page Security Validation

What's the "best practice" when it comes to the web page security validation expiration? We set ours at 55 minutes per web application. We have SharePoint 2010, Standard Edition.
0
votes
0answers
16 views

Error when creating new site collection by new user (developer)

We have installed SharePoint on a server. A new sharepoint developer has joined the team and the system admins have provided him a login: server\newemployee Now, if he logs into Windows and opens ...
0
votes
0answers
14 views

Avoid giving full control, but still be able to create subsite. Question about groups

So I went ahead and created a new group and Permission Level called "Create Subsites". I added the Create Subsite permission and assigned that Permission level to a new group. The users can create ...
0
votes
0answers
32 views

Create users form SharePoint

In SharePoint, can you create users directly from a teamsite? i.e the users are not local computer users or Active directory users, but they are created and managed from SharePoint. This means that ...
0
votes
1answer
44 views

Web part SecurityException — System.Net.WebPermission failed — Farm Solution

I am getting an error with trying to make a HttpWebRequest inside a web part, I'm getting a SecurityException saying that System.Net.WebPermission failed. While searching for an answer, I came across ...
0
votes
1answer
123 views

SharePoint security based on Active Directory security groups not work

Please help me. In the organization , we have deployed SharePoint 2013 , to control access to sites decided through security group Active Directory. Active Directory security groups are added to the ...
0
votes
1answer
83 views

Can Active Directory Upgrade lead to problems with SharePoint?

Are there compatibility issues between SharePoint version and Active Directory version? I have a scenario with MOSS 2007 and Active Directory 2000. I will upgrade Active Directory to 2012. I ...
2
votes
2answers
514 views

How to check username/accountname under which the code runs?

We want piece of code which we can paste in the code behind and get the username under which code runs for:- (usually .NET code runs under account of application pool) Timer job. Event receiver. ...
0
votes
1answer
41 views

External Claims-Based SharePoint 2010 asking users for credentials on documents

I am running a SharePoint Foundation 2010 site which uses claims based authentication. (https://subdomain.domain.com). This is done using a Secure Token Provider. The authentication/authorization ...
0
votes
1answer
26 views

SharePoint installation using one-account method

please help me with one hard task. I am not able to convince some admins and neither whole companies that installing & using SharePoint by using one (local) account method is against all best ...
1
vote
2answers
187 views

How do I fetch the data from list present in root web of the root site collection?

We need to populate some data on an application page. The application page is present in the layouts folder and hence is accessible via the respective site URL. There are multiple site collections. ...
1
vote
0answers
97 views

Unique security scope number inside library

I have seen a recommendation, that there should be no more security scopes than 5000: For most farms, we recommend that you consider lowering this limit to 5,000 unique scopes. For large lists, ...
0
votes
1answer
69 views

Deny users access to site home, allow access to document library

I am using SharePoint Foundation 2010 and working on managing permissions at the moment. I would like all users to have access to the document library "Shared Documents". I would like only users part ...
1
vote
2answers
40 views

Strange permission behaviour

We have a SP 2010 system. We recently discovered that users with no permissions to a library are able to open documents in a library if provided with a direct url link to the document, thereby ...
2
votes
1answer
71 views

Limit number of users in a security group

I've a requirement like there should be only one user with some specific permissions on a given site. We should not allow Admin to add more than one user with those permissions, So I created a group ...
1
vote
1answer
49 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...