Security is the protection of information and property from theft.
0
votes
2answers
1k views
Risks of using Permissive vs. Strict for Browser File Handling
We have some web sites in our SharePoint 2010 site collection that need to display SWF files (to play FLV videos). For SharePoint to render the videos, we go to the web application in Central Admin > ...
0
votes
1answer
26 views
I want a literal 'Read/view Only' library - no save, download or print functionality. Is this possible?
I have a number of documents that I want to be literally 'Read Only' in a Library (ideally view in the browser). This means that I want to disable the 'Save As', download and print functionality to ...
1
vote
0answers
7 views
I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365
I'm using SharePoint 2013 on Office365.
I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!)
However, when I go onto my site and try to add ...
5
votes
5answers
2k views
User Accounts Disappearing From SP Groups
We've been running into a bizarre scenario and I'm at a complete loss.
I'm a site collection admin for my division's portal. We're on a shared internal company-wide MOSS server, and I have no access ...
0
votes
1answer
25 views
Need extra layer of authentication on SharePoint list
The following below was requested in an effort to eliminate any security isses. (We are currently using the default NTLM authentication):
-Create a hidden URL extention for admin's only (new site ...
1
vote
1answer
50 views
NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users
I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model.
When I call a webservice method that operates on a SharePoint Web Application ...
1
vote
1answer
778 views
“DWORD (32-bit) Value” or “”Qword (32-bit) Value" - which one should I configure in Windows 64-bit registry?
"DisableLoopbackCheck & SharePoint: What every admin and developer should know" advises to disable ("infamous") "loopback check" completely on dev machine by following
"You receive error 401.1 ...
0
votes
0answers
29 views
IE warning - Microsoft Office Contact Retriever
When I open a SP 2010 page with IE 10 on Windows 8, I get this warning:
Internet Explorer Security
A website wants to open web content using this program on your
computer:
Name: ...
1
vote
1answer
657 views
Exception occurred while connecting to wcf endpoint
I get very strange exception "exception occured while connecting to wcf endpoint .... access denied". only when I go to any Document Library.
I logged on as Administrator and I have added "Full ...
0
votes
1answer
388 views
Taxonomy.asmx returns sometimes 'No credentials are available in the security package'
I've created a WCF WebService which connects to the Taxonomy service from SharePoint with a 'Service Reference' in Visual Studio 2010 to the ...
0
votes
1answer
14 views
Service account to access UNC
I'm trying to access the UNC to copy a file from the UNC share to another location. The way it is set up it requires an interactive challenge for credentials, and I was told there is no way to change ...
0
votes
0answers
25 views
Run Sharepoint Query web service with just the username and/or user role known
On my current project we are implementing a WCF layer wrapping Sharepoint web services. Search is a huge thing in our App. So, we are using a QueryService extensively. It works like a charm in its ...
0
votes
1answer
24 views
SecurityException on list GetItems
I'm using custom list event receiver on SharePoint Online to process some field in the item.
In the Event Receiver, I use a query to another list to retrieve value from that list in to current item. ...
0
votes
2answers
17 views
How to exclude users from view access?
We have a SharePoint 2007 site that is viewable by "All Authenticated Users".
As part of company policy, when an employee is terminated or leaves, we modify their active directory account to remain ...
1
vote
1answer
23 views
o365 A2 safe bet for our SharePoint 2013 production farm?
While we build our on-prem SP 2013 we are playing with free o365 A2.
We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users.
Maybe 500 users using ...
0
votes
3answers
1k views
Users get access denied but “check-permissions” claim they should have access
SharePoint 2010 is giving me a major headache.
We have a site collection with a number of sites where we are trying to give certain users access to certain areas of the site.
The problem is that ...
1
vote
1answer
34 views
How to secure SharePoint content
I can navigate to following path and access SharePoint content easily.
\\servername@portno\DavWWWRoot\DocLibraryName
How to prevent others from accessing this path?
0
votes
1answer
40 views
SharePoint Permissions not working
I am using SharePoint 2010.
When I set permissions (I Only grand myself access) on a document library or folder or document EVERYONE can still see it and download the documents. Why is that? What is ...
0
votes
1answer
406 views
Powershell and CredSSP in Production Environments
I try deploy Sharepoint WSP projects using PowerShell Remoting.
See PowerShell Remoting Sharepoint 2010 Error
Solution is configure CredSSP for Sharepoint.
But Microsoft says:
Caution: Credential ...
0
votes
1answer
18 views
SharePoint 2013 Site Collection Move Owner to Group
I am in process of migrating our WSS 3.0 installation to 2013 and I am at the point where I need to break the single site collection down into more manageable sizes and I have a script that ...
1
vote
1answer
1k views
Sign in as a different user access denied
Clicking the "sign in as a different user" link from the system menu in SP 2010 yields an access denied error.
URL is:
\_layouts\closeConnection.aspx?loginasanotheruser=true
any ideas?
0
votes
1answer
331 views
Sharepoint 2010 users strangely removed from Sharepoint Group (Expert Advise required)
Since 3 months client portal was working fine suddenly due to some network problem we restarted SharePoint server, after that some Active directory users complained system was inaccessible, where ...
2
votes
1answer
39 views
RoleAssigments are being assigned by default to all new pages
I am pretty new to SharePoint, so please let me know if there is some more info or clarification required. I am creating a webapplication with certain SP groups, libraries and pages in that order by ...
0
votes
1answer
19 views
Hide Manager Permissions of Parent
In Document library, when clicking on Actions, users have "Manage Permissions of Parent" and "Edit Permissions".
Is there a way to hide the 'Manage Permissions of Parent', as users are accidentally ...
2
votes
1answer
327 views
Make all sharepoint specific cookies non-persistent?
Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
2
votes
2answers
100 views
How to set authentication model to allow cross-domain access?
How do I change the security settings to allow cross-domain on the same web-server?
I have multiple instance or site collections on the same server but want to make sure that web-services to ...
0
votes
2answers
112 views
Is it possible to add a security trim that filters by user groups?
In my left hand side bar I have 3 links to downloads- one for each of three different companies. I need each company to log in and see only the one link to their companies downloads - not all 3 links ...
2
votes
1answer
384 views
Uploading files using object model
I'm experiencing some problems adding documents to a library using the object model.
I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
0
votes
0answers
22 views
Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx
Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
0
votes
1answer
82 views
In SP 2010 or SP2013 How can I have search results use audience targeting
I have items in my document library that are configuered for audience targeting.
What I would like to do is have the items in my search results page "search results" web part filter the items at an ...
1
vote
1answer
106 views
Audit log a specific user (or: Monitor the admin)
Is it possible to audit log only specific users (thus keeping the Audit-log under control and not harming performance)?
Background Sitecolletion admins can view and edit everything (de facto SP ...
0
votes
0answers
39 views
Managing security and privileges for my Wiki library
I am somehow new to SharePoint. I have created a Wiki Library inside my team site, and it seems that it will give me all the features I need Out-Of-Box such as content editing, rich text editing, ...
2
votes
3answers
2k views
Field-Level Security
Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
0
votes
1answer
15 views
Denying the manage rights permission
I'm trying to fullfill a requirement which forces the use of Active Directory groups. I'm having issues getting to where I want to be.
Upon creation of a new site, I'm going to use AD groups to ...
1
vote
5answers
1k views
Allow users to view items in Document Library, but not open the files
I have the requirement to allow users to view the content of a document library, including browsing through folders, but not actually open the individual files.
There doesn't appear to be a ...
0
votes
1answer
32 views
How to show what level of permission a group or user has to a site?
In SharePoint 2007 when you go to a site and view advanced permissions (Site Actions - Site Settings - Modify All Site Settings - Advanced Permissions) you are presented with a page that has a table ...
0
votes
2answers
27 views
Capture SharePoint role group and group members?
For our audit process I need to regularly capture all of our SharePoint role groups (for our main site collection) and the members in each group. Is there a reliable way to approach this problem?
1
vote
4answers
2k views
Modifying the current list item in a workflow
I have a workflow running when an item is adding to a document library. In this workflow, I have a code activity that I am attempting to set permissions to the list item. I am trying to break ...
0
votes
1answer
25 views
Frequently Needed Business Rule About Security that SharePoint Does Not Provide OOTB
Suppose that i have two lists like this
REGION_LIST [ RegionName(text), RegionResponsibles(multi-select peoplepicker) ]
ISSUES_LIST [Some issue related columns, Region(lookup) ]
Main requirement is ...
1
vote
1answer
29 views
Default Security Groups on Site Creation from Web Service
I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
1
vote
0answers
48 views
Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?
An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
0
votes
1answer
103 views
Site collection administrators / owners question
I'm stuggling over a somewhat architectural question which concerns site collection admins and owners. To begin with, I found the thread answerd by Per Jakobsen (here Site collection owners and site ...
2
votes
1answer
89 views
ValidateFormDigest - when exactly does it need to be called?
Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest?
Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...
0
votes
0answers
13 views
Problems with Check Permissions form
I have a SharePoint 2010 production environment and I'm experiencing unusual behaviour with the Check Permissions form.
I know that a user has access, but the Check Permissions form is not reporting ...
2
votes
2answers
96 views
Sharepont 2013 - NTLM Logout
Our SharePoint 2013 site will not log users out unless the browser is completely closed. We are using NTLM authentication but the site is hosted, so it is external accessible. We are afraid users ...
0
votes
2answers
148 views
How to prevent users from getting at the source files for Excel Web Services
I have a request to put a large Excel dataset on a MOSS 2007 sharepoint page.
The XLSX is about 13 MB in values alone - about 50,000 rows. It's updated weekly, usually in batch form (i.e. some ...
2
votes
1answer
47 views
How to add security to a page using powershell
I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
0
votes
0answers
10 views
Limiting Report Subscription Options
We are using SharePoint Enterprise 2010 to provide reporting functionality for our sales team, using SSRS RDL files. The report's themselves work just fine, but we are going to train our sales team ...
0
votes
1answer
35 views
giving access to an entire web application
Im trying to elevate someones permissions so that they can edit and add users etc across all site collections in our farm. I added the user into the farm admins group but it doesnt look like their ...
0
votes
0answers
68 views
Is there a way to restrict or limit the Manage Permissions permission level?
Scenario:
A custom permission level is created that doesn't have as many rights as the Site Owner role (Full Control permission) but, has more rights than a normal Contributor role (Contribute ...
