0
votes
2answers
54 views

Sharepoint 2013 web part does't impersonate current user, while SP 2010 does?

I'm developing full trust web part deployed in GAC that access soap web service on localhost. Web service uses windows authentication. SP 2010 web part impersonates current user while SP 2013 sends ...
0
votes
1answer
47 views

What user executes the code when running SPSecurity.RunWithElevatedPriveleges?

I have done research on this and still can't find a strong answer. Some soures say that when using SPSecurity.RunWithElevatedPriveleges that the code is executed as a site collection admin. Some ...
1
vote
1answer
40 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
0
votes
1answer
122 views

Can SPPersistedObject settings be updated by normal users if ran with elevated privileges?

I have a custom ribbon icon "Enlist" deployed to each document library. A normal (i.e. non-admin) user can click this icon; when he does, I would like to permanently save the document library ...
0
votes
3answers
309 views

List users in SharePoint group running as system

This works as local administrator only, but I'm trying to figure out how I can make it work with NT AUTHORITY\SYSTEM. It starts spitting out group members but fails with access denied on a specific ...
0
votes
1answer
93 views

Access all workflow tasks without being assigned to for validation

I have a request approval sequential workflow that has many tasks created upon approval. For each approval, Im using a custom webpart that shows different panels based on the status of the request. ...
0
votes
1answer
76 views

How to show what level of permission a group or user has to a site?

In SharePoint 2007 when you go to a site and view advanced permissions (Site Actions - Site Settings - Modify All Site Settings - Advanced Permissions) you are presented with a page that has a table ...
0
votes
2answers
53 views

Capture SharePoint role group and group members?

For our audit process I need to regularly capture all of our SharePoint role groups (for our main site collection) and the members in each group. Is there a reliable way to approach this problem?
0
votes
1answer
92 views

Is there a way to list all content deployment jobs on aspx page?

Is there any way to get all local contentdeployment jobs from within web application code? I'm trying to list all jobs on an aspx page in the backend of a site collection, but everytime I execute ...
9
votes
1answer
2k views

Manage trust/add certificate

I try to add a certificate under "central administration>security>manage trust" but I always get the following error: The Root Certificate that was just selected is invalid. This may be ...
2
votes
4answers
3k views

How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)

Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
1
vote
1answer
3k views

“DWORD (32-bit) Value” or “”Qword (32-bit) Value" - which one should I configure in Windows 64-bit registry?

"DisableLoopbackCheck & SharePoint: What every admin and developer should know" advises to disable ("infamous") "loopback check" completely on dev machine by following "You receive error 401.1 ...
0
votes
1answer
334 views

SpServices Cannot Get Sub-Sites without Being Site Collection Admin

I am building a web part which is delegated by permissions. It is displayling members of the Members group and Owners group onto the page, and if a user does not have Members or Owners permissions, ...
0
votes
3answers
450 views

Access Denied for SPUserCollection.remove()

Works for administrator but not working for a normal user. I even tried it with "SPSecurity.RunWithElevatedPrivileges(delegate() {});" after breaking RoleInheritance, and even tried ...
2
votes
3answers
265 views

Deny user access from SharePoint Native but allow it from custom application

How can i restrict a user from entering SharePoint - unless he is using my custom application? For example, a user tries to open http://Mysite , he gets an access denied error. But as the same time, ...
2
votes
1answer
444 views

Security Exception - Trying to load MySite Blog

When I try to run this async query it fails: private void SomeFunction() { Thread thread = new Thread(GetBlogInfo); thread.Start(); } private void GetBlogInfo() { ...
2
votes
1answer
4k views

How to remove a permission to a SPPrincipal on a Item (programmatically)

I'm trying to work with privileges on elements of a list. I want the item to mantain the same privileges for all SPPrincipal I don't modify. This is the code public static void ...
1
vote
1answer
49 views

Security Issue for a user group in SharePoint 2010

For a SharePoint group 'A', I made the security to Read only. Now my requirement is that, I have created a custom webpart, with one text box and a button, Where the users from 'A' group was supposed ...
2
votes
1answer
608 views

Change List Item Permission via Web Services?

Using web services, is there a way to assign a list item different security than the rest of the list? Lets say I have 3 rows in the list and 2 different groups. 1. A ; Group A & B can see ...
2
votes
1answer
71 views

Silverlight application privileges

I have a silverlight application which uses the client object model to access the sharepoint server. When i run the app "out-of-browser" with elevated trust everything works great, but when i try it ...
4
votes
1answer
2k views

How do I remove all users from an SPGroup object?

I have an SPGroup object populated, how can I remove all members from the group, so that essentially I start with a fresh group. I can't delete and recreate it, so I need a way to work with the ...
3
votes
3answers
809 views

Securing usernames and passwords for external SQL DB

We want to ensure that we are following best practice around connecting to a custom database. I'm not a developer as such so thought I would ask SharePoint Overflow :-). We have several SharePoint ...
1
vote
1answer
285 views

Sharepoint Security Trim control & its permission

We have a Custom List in SharePoint 2007, all authenticated users are allowed to add a new item into it. Now, we have a page on which we are displaying the item details and it will be accessible for ...
1
vote
1answer
2k views

ClientContext security won't work with claims-based SP2010 security enabled

I want to connect to SP2010 server with claims based authorization via client context. But I have security issue. First I didn't managed to connect with default credentials. Then I wrote: ...
6
votes
5answers
2k views

What is the difference between SPContext.Current.Web and SPContext.Current.Site.OpenWeb()?

My colleague found that some scenarios of working with SPWeb objects depend on how you obtain them. I'm not talking of impersonating with UserTokens - that another story. But at times when you write ...
0
votes
1answer
293 views

ASP.Net Forms authentication issue

I am using SharePoint Server 2007 Enterprise with Windows Server 2008 Enterprise. I have deployed a collaboration portal template based SharePoint site collection. I am developing using ASP.Net web ...
1
vote
1answer
1k views

Reason for FormDigestSettings.Enabled?

I am using SharePoint Server 2007 Enterprise with Windows Server 2008 Enterprise. I have deployed a publishing portal. I am developing a ASP.Net web application using VSTS 2008 + C# + .Net 3.5 + ...
0
votes
2answers
665 views

Sharepoint SPWeb rename - Exception SPException - The security validation for this page is invalid

When attempting an SPWeb rename I receive the following SPException: Exception SPException - The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and ...