0
votes
1answer
10 views

Web part SecurityException — System.Net.WebPermission failed — Farm Solution

I am getting an error with trying to make a HttpWebRequest inside a web part, I'm getting a SecurityException saying that System.Net.WebPermission failed. While searching for an answer, I came across ...
0
votes
1answer
22 views

SharePoint installation using one-account method

please help me with one hard task. I am not able to convince some admins and neither whole companies that installing & using SharePoint by using one (local) account method is against all best ...
1
vote
1answer
25 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
0
votes
1answer
69 views

Can SPPersistedObject settings be updated by normal users if ran with elevated privileges?

I have a custom ribbon icon "Enlist" deployed to each document library. A normal (i.e. non-admin) user can click this icon; when he does, I would like to permanently save the document library ...
1
vote
3answers
54 views

SharePoint user access not updating from AD Security Groups

I have a SharePoint site collection that has no direct user permissions set, we have a policy where users are added to a specific AD group to get access to different areas, your classic Role based ...
3
votes
2answers
60 views

Access Denied from Migrated SP2010 -> 2013 Web App

I've migrated a web application's content database from SP2010 to SP2013. After the migration was complete, I am completely locked out of the web application. Navigating to the root site collection ...
1
vote
1answer
32 views

Sharepoint Foundation 2010 Hardening

I have never hardened a SharePoint site before and I am having a hard time using all the recommendations I find online. This blog post discusses the different accounts that should be used for ...
0
votes
2answers
315 views

SharePoint 2010 Top Link Inheritence and Permissions

We have an issue in SharePoint (Enterprise) 2010 with our Top Link NavBar inheritance and permissions across sub-sites. Current Configuration We have a root site collection: RSC1. Under the root ...
0
votes
0answers
40 views

Multiple, overlapping group membership - does not result in most permissive rights

I've got a site with two document libraries. I have users set up in two Active Directory groups, and mapped those groups to two Sharepoint groups. (i.e. the only member in the SP group is an AD ...
1
vote
3answers
37 views

Why can people change other people's items even though I set it up not to?

I have created a shared list where members can add new items and edit their own items. These members only have the ability to contribute, and not the ability to manage lists. In the list's advanced ...
1
vote
2answers
196 views

How can I learn how to create a delegation engine? [closed]

One of the last places I worked at had a delegation engine in SharePoint, a SharePoint List that specified the SharePoint groups that would be sought for approval for a workflow based on that ...
1
vote
1answer
115 views

Approval Status is different given user's permissions. Visitors can see non-approved items

The approval status for blog post items is different given user's permission on a blog site. I had the Draft Item Security setting set to "Only users who can approve items (and the author of the ...
2
votes
1answer
118 views

Access to Default Landing Site without Access to Everything

I have a very basic SharePoint 2010 site collection that was set up as the default Team Site template. My goal is to have domain users be able to navigate to the main landing page of the site ...
1
vote
2answers
154 views

Are “Security only” crawls kicked off automatically?

I know that if a user is added to a SharePoint group, a crawl needs to run before the ACLs are updated to reflect the new user's permissions. The question that my team is debating is whether or not ...
0
votes
1answer
258 views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
1
vote
2answers
150 views

SID and other fields added to user information list?

According to stuff I am reading on the web, when an AD user gets added to SharePoint site the following information will get copied from AD to the user information list: Display name Login name ...
1
vote
1answer
135 views

Site Collection Administrators permissions level?

I tried to answer this one via Google but the answers seem quite conflicting. I was wondering if anybody knows this answer definitively, or can reference any Microsoft documentation (I couldn't find ...
0
votes
1answer
24 views

Permissions needed by System security officer

In our current setup. I am responsible for Sharepoint in our company. This means that I do everything from deploying to application support to giving users rights to the platform when it is required. ...
-1
votes
1answer
33 views

security concerns on sharepoint deployment [closed]

I've inherited our company's SP 2010 deployment. I'm looking for security flaws and other potential issues. Any suggestions as to what to look for?
1
vote
0answers
1k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
0
votes
1answer
397 views

SharePoint Permissions not working

I am using SharePoint 2010. When I set permissions (I Only grand myself access) on a document library or folder or document EVERYONE can still see it and download the documents. Why is that? What is ...
0
votes
3answers
140 views

Denying the manage rights permission

I'm trying to fullfill a requirement which forces the use of Active Directory groups. I'm having issues getting to where I want to be. Upon creation of a new site, I'm going to use AD groups to ...
0
votes
1answer
38 views

Frequently Needed Business Rule About Security that SharePoint Does Not Provide OOTB

Suppose that i have two lists like this REGION_LIST [ RegionName(text), RegionResponsibles(multi-select peoplepicker) ] ISSUES_LIST [Some issue related columns, Region(lookup) ] Main requirement is ...
1
vote
0answers
215 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
0
votes
1answer
42 views

giving access to an entire web application

Im trying to elevate someones permissions so that they can edit and add users etc across all site collections in our farm. I added the user into the farm admins group but it doesnt look like their ...
0
votes
1answer
45 views

SP2010, are the search index / query component files a risk for highly secure documentation?

Say I have some secure documentation held in SharePoint. Now say the SQL database/BLOB location is encrypted. Enterprise Search is used to crawl this content and therefore the content is indexed. Is ...
3
votes
3answers
1k views

Multiple login prompts are driving users nuts

What are the typical causes of multiple login prompts on sharepoint sites? We have a production site where users who login outside of the domain (from home) are prompted multiple times (3 or so ...
0
votes
2answers
458 views

Is it possible to add a security trim that filters by user groups?

In my left hand side bar I have 3 links to downloads- one for each of three different companies. I need each company to log in and see only the one link to their companies downloads - not all 3 links ...
1
vote
1answer
382 views

Get Access to List View webpart without having access to list

So I'm developing an event management system at the moment where there are two user groups, "editors" and "attendees". By registering for an event, the SPUser is added to a list "attendeeList" which ...
1
vote
1answer
630 views

How can I add “All Authenticated users” (FBA) to a SharePoint Group using Powershell?

I have an FBA site and I need to add "all authenticated users" to a group using PowerShell. How can I do that?
0
votes
1answer
31 views

Maintaining role groups and users in two farms simultaneously?

We currently have two farms - a SharePoint 2007 one and a SharePoint 2010 one. We have the same groups in both farms and the same userbase. At the moment when someone joins or leaves the company ...
0
votes
2answers
238 views

How to remove sharepoint security group in the feature?

I want to remove custom security group from sharepoint 2010. I created custom security group as follows: SPGroup wcmGroup = currentWeb.SiteGroups[permissionName]; SPRoleDefinition ...
0
votes
1answer
129 views

Site collection administrators / owners question

I'm stuggling over a somewhat architectural question which concerns site collection admins and owners. To begin with, I found the thread answerd by Per Jakobsen (here Site collection owners and site ...
1
vote
1answer
59 views

SpSecutityTrimmedControl runs in Pagepreview mode - ?pagepreview=true

I'm branding the sharepoint ribbon and need some changes (css) when the page gets in pagepreview mode. I've got this code <SharePoint:SpSecutirtyTrimmedControl runat="server" ...
2
votes
1answer
1k views

How to Set Forms Authentication Timeout?

I have a public facing SP2010 site that uses forms authentication (default ASP.NET membership provider). I noticed that The user stays logged in even after hours of inactivity. We need the user to be ...
0
votes
1answer
143 views

Site Permissions AD Query

When assigning permissions to a site in Sharepoint 2010, is it possible instead of specifically adding a group or a user, to create an LDAP query or something simular. For example I have a group ...
2
votes
4answers
3k views

Field-Level Security

Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
1
vote
1answer
2k views

“DWORD (32-bit) Value” or “”Qword (32-bit) Value" - which one should I configure in Windows 64-bit registry?

"DisableLoopbackCheck & SharePoint: What every admin and developer should know" advises to disable ("infamous") "loopback check" completely on dev machine by following "You receive error 401.1 ...
0
votes
1answer
342 views

“404 FILE NOT FOUND” on my username entries

In Sharepoint 2010 Central Administration --> Security --> Manage the farm admii nistrator group (Central Administration : Site Settings : People and Groups - Farm Administrators), when I click on my ...
0
votes
1answer
84 views

Right Management Sharepoint

I have a sharepoint list. Users should be able to create new items and change some attributes. I gave full access for the users on the list items. But now I think there is a security gap: what ...
0
votes
1answer
595 views

Sharepoint 2010 users strangely removed from Sharepoint Group (Expert Advise required)

Since 3 months client portal was working fine suddenly due to some network problem we restarted SharePoint server, after that some Active directory users complained system was inaccessible, where ...
0
votes
2answers
515 views

All users in multi tenant environment

I have a problem with authentication in a multi tenant environment. I have a couple of seperate customers which all have their own SharePoint environment within our hosted environment. In the AD, I ...
1
vote
3answers
3k views

Sharepoint 2010 Item level Permission to a Document Library is Our approach right?

We are planing to apply Item level Permission on document library and want share point experts advise...are we going right way or we will fall in performance issue or others.. What We Have : 1- We ...
1
vote
1answer
89 views

Cannot read site collection details with some accounts

In my SharePoint environment, I have a few seperate web applications with some different admin users. Now a new user I created is added as local admin (needed for Powershell remoting) and farm admin. ...
5
votes
5answers
3k views

Google Analytics for an Intranet Site

I installed the Google Analytics tracking code in an intranet site, it works properly. But my concern is, are there any security risks of using it for an intranet site? simply, is it ok to use Google ...
2
votes
1answer
1k views

EnsureUser throws The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your operation again

I have this code: The EnsureUser Line is throwing me that exception, any idea? The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your ...
0
votes
2answers
4k views

Stop inheriting permissions programatically

I want to set read permissions to some sharepoint groups to a list. For existing sites I did it manually, Stop Inherit permissions. Then on groups I chose the groups and edited their permissions, ...
1
vote
1answer
48 views

List permissions

I want to disallow a specific list only to be only read only for all users in the site. The only one with permissions would be the site collection administrator of course. I stoped inheriting ...
2
votes
1answer
407 views

Security Exception - Trying to load MySite Blog

When I try to run this async query it fails: private void SomeFunction() { Thread thread = new Thread(GetBlogInfo); thread.Start(); } private void GetBlogInfo() { ...
0
votes
1answer
338 views

How to give access programatically to a site

In my scenario we want to customize the access request page. We already know how to create an application page, and with a powershell command, instruct sharepoint to use that page instead. ...