Security is the protection of information and property from theft.

learn more… | top users | synonyms

2
votes
1answer
255 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
1
vote
1answer
25 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
1
vote
1answer
21 views

Managing SharePoint groups at site/site collection level

SharePoint groups are created at site collection level and are assigned to a site. By site collection level it refers to root site. So, reframing the above sentence we get:- SharePoint groups are ...
1
vote
1answer
129 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
1answer
83 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
1
vote
1answer
64 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
3
votes
0answers
769 views

Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given

Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying: This action couldn't be performed because Office doesn't recognize the ...
2
votes
0answers
12 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
2
votes
0answers
24 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
2
votes
0answers
96 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
2
votes
0answers
294 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
1
vote
0answers
11 views

Unique security scope number inside library

I have seen a recommendation, that there should be no more security scopes than 5000: For most farms, we recommend that you consider lowering this limit to 5,000 unique scopes. For large lists, ...
1
vote
0answers
12 views

Control all user traffic to Sharepoint Online

We are working on a gateway solution aimed for Sharepoint Online to control all user traffic and possibly, do changes on requests and responses. Is there any way to enforce/limit connections to ...
1
vote
0answers
20 views

Fine-tuning SP2013 Document Library permissions

I have the need to give access to a role for creating documents and folders in a document library and giving access to another role to create documents (but not folders) How would I go about doing ...
1
vote
0answers
88 views

FBA Custom login page to use 2 factor authentication - simplified

User provides an username/password. Should validate those and only then proceed to step 2. User provides an additional authentication token. If succeeds user is authenticated against SharePoint and ...
1
vote
0answers
25 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
1
vote
0answers
32 views

In SharePoint 2013 is there a security group that allows full access to all content in a farm by default?

I'm setting up a SharePoint 2013 development server and I've added my account to the Farm Admin group. In prior versions this meant that I had access to all content in the farm by default. It looks ...
1
vote
0answers
145 views

How to restrict access to edit attachments in lists?

We have Windows SharePoint Services 3.0 SP 3 (12.0.0.6608 from CA) on Windows 2003 Server R2 EE. In the main we use our WSS as sort of book of problems. And by book of problems, i mean that there is ...
1
vote
0answers
22 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...
1
vote
0answers
1k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
1
vote
0answers
217 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
1
vote
0answers
179 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
1
vote
0answers
86 views

Why is AddComment on SocialCommentManager throwing SPException?

When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying "The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
0answers
48 views

Is use of PageView web part poses a security risk?

I have two internal web applications in same domain, I want to integrate them within sharepoint using a PageView webpart. Some how the security community of the organization believes it would ...
1
vote
0answers
1k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
1
vote
0answers
397 views

Get Permissions with client object model

i want to add a permission on a folder who's inside a document library with javascript/jquery/client object model. The problem i have is, its a custom permission level created when some feature is ...
1
vote
0answers
38 views

Secure Data from Farm Admins and Database Admins

I am working with a client whose farm admins and database admins may not be approved to view information in one of the site collections due to governmental regulations. Therefore, he would like to ...
1
vote
0answers
660 views

Importing site gives “Security check failed in OnFolderImport” error

I'm using the SharePoint Content Deployment Wizard (2.8 beta) and have successfully exported a site. Now I'm trying to import the site and it gives me the following messages in the log and isn't ...
1
vote
0answers
254 views

Editing navigation from site Actions results in error in MOSS 2007

When I or any other user on any machine tries to change the navigation through Site Actions - Modify Navigation, an error occurs stating "The security validation for this page is invalid. Click ...
0
votes
0answers
9 views

Web Page Security Validation

What's the "best practice" when it comes to the web page security validation expiration? We set ours at 55 minutes per web application. We have SharePoint 2010, Standard Edition.
0
votes
0answers
8 views

Error when creating new site collection by new user (developer)

We have installed SharePoint on a server. A new sharepoint developer has joined the team and the system admins have provided him a login: server\newemployee Now, if he logs into Windows and opens ...
0
votes
0answers
9 views

Avoid giving full control, but still be able to create subsite. Question about groups

So I went ahead and created a new group and Permission Level called "Create Subsites". I added the Create Subsite permission and assigned that Permission level to a new group. The users can create ...
0
votes
0answers
28 views

Create users form SharePoint

In SharePoint, can you create users directly from a teamsite? i.e the users are not local computer users or Active directory users, but they are created and managed from SharePoint. This means that ...
0
votes
0answers
25 views

Check user Permission for List Items

I need to set up custom permission cheking for List Item. For example: list have a PeoplePicker with some staffs and I need to set permission for this SPListItem for whole of this person and his ...
0
votes
0answers
10 views

Should four different companies (with overlapping associates and security permissions) have diff. web applications

We have four companies that have similar ownership (and some overlapping associates) yet are separately formed corporations. In trying to setup an intranet site, I was wondering if we should have ...
0
votes
0answers
43 views

Using search with elevated permissions in a SharePoint Auto/Provider hosted App

I'm wondering if it's possible to search with "App Only" policy rights. The app scope 'Search' (available in Visual Studio) only allows me to select the "QueryAsUserIgnoreApp" permission. I already ...
0
votes
0answers
9 views

Get request information in IMSO_VirusScanner interface's scan and clean method

I am trying to get current sharepoint's request information in scan/clean method of SharePoint's IMSO_VirusScanner interface. We are getting SPContext in initialize method but not in scan/clean ...
0
votes
0answers
16 views

authentification by tcl script

How can I get authentification on sharepoint server by tcl script? I tried the following but got no server request. #!/usr/bin/tclsh package require rest package require http puts [http::data ...
0
votes
0answers
40 views

Multiple, overlapping group membership - does not result in most permissive rights

I've got a site with two document libraries. I have users set up in two Active Directory groups, and mapped those groups to two Sharepoint groups. (i.e. the only member in the SP group is an AD ...
0
votes
0answers
23 views

SharePoint Security Token Service - High CPU Usage

We are currently experiencing high CPU usage coming from the Security Token Service IIS Worker process. If we cycle the application pool the CPU usage drops down to normal levels. We aren't noticing ...
0
votes
0answers
59 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...
0
votes
0answers
14 views

Security level on SP13

This is the scenario: I have a SP13 in which I'm deploying a File Server, so I created one web application and inside of it one Site Collection for each department. I give Full Control access to a ...
0
votes
0answers
48 views

Block all access from a URL not on the alternate access list

I recently noticed warnings similar to the following in the log viewer: Event 8059 Alternate access mappings have not been configured. Users or services are accessing the site http://< ...
0
votes
0answers
32 views

SharePoint permissions using PowerShell SPWeb

I've been going through the MS Cert 70-667 training kit and one of the exercises was to run: Get-SPWebApplication -IncludeCentralAdministration | Get-SPSite -Limit ALL | Get-SPWeb -Limit ALL ...
0
votes
0answers
123 views

SPO - Exchange Distribution Lists vs Security Groups vs SharePoint Permission Groups

We are looking to move to SharePoint Online 2013. We have users in our On-Prem MOSS 2007 environment that use Exchange Distribution Lists to Email in outlook, Provision and send email alerts from ...
0
votes
0answers
15 views

Create Required Custom Filter

I have a list that needs to be filtered for security purposes. I have a list of users that have supervisors. The list items created by(there is a field for that) a user need to be seen by that user ...
0
votes
0answers
118 views

Run Sharepoint Query web service with just the username and/or user role known

On my current project we are implementing a WCF layer wrapping Sharepoint web services. Search is a huge thing in our App. So, we are using a QueryService extensively. It works like a charm in its ...
0
votes
0answers
64 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
0
votes
0answers
73 views

Proper way to get all lists of a certain type from an entire site collection regardless of current location

I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal. I'm currently using the following, but can't ...
0
votes
0answers
97 views

Users denied access to certain site collection until an administrator opens it

We are having a problem with users getting "Access denied" errors when trying to access a certain site collection. These users all have the proper permissions to the site and have accessed it in the ...