Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
2answers
438 views

Sharepoint 2013 web part does't impersonate current user, while SP 2010 does?

I'm developing full trust web part deployed in GAC that access soap web service on localhost. Web service uses windows authentication. SP 2010 web part impersonates current user while SP 2013 sends ...
0
votes
0answers
444 views

Share a folder (break inheritance), access denied

I have a problem in Sharepoint 2013 which is reproducible. Create a document library on any site. Create a folder in this library. Break inheritance on this folder and add a user that doesn't have ...
0
votes
0answers
29 views

SharePoint data / document encryption options: experiences and recommendations

I'm evaluating the options to implement an encryption of the data / documents that are saved in SharePoint (2013). The important requirement is that SharePoint administrators (farm admins) are not ...
0
votes
0answers
145 views

IE default security settings block any App scripts from running

I wrote a Sharepoint-hosted app for use by a single company. But in order for my javascript to execute on their local intranet, which uses Microsoft Windows Server 2008, I have to instruct them to ...
0
votes
1answer
214 views

User Authentication in Sharepoint and OTP

Currently we have SharePoint installed in our production environment. We are only on intranet currently, but we would like to make our SP accessible from internet and web URLs. Currently for ...
0
votes
0answers
158 views

FBA Active Directory Security Groups Not Working SP 2013

So I have in active directory one security group, lets call it "Shrpt_Users". Within SharePoint I have granted this Active directory group read rights to my sub site: "Advertising". My user ...
0
votes
0answers
32 views

Users with no permissions can still see empty list views

I have a problem regarding security on lists. If I break role inheritance on lists and exclude users from having access to that specific list, the users are still able to navigate to the list and ...
0
votes
0answers
31 views

Folder permissions

I have a problem where I need to allow access to a folder to a select group of people where the folder is buried deep within a series of folders. For example Folder A (top level | ---->Folder ...
0
votes
1answer
88 views

Check if a user can read a specified File

I'm working with SharePoint Client API 2010 for a .Net application. I want to check if the current user (or a specified user) can read a specified File? This user could also be in a SP Group or in a ...
0
votes
1answer
45 views

Is it possible to apply device dependent security trimming?

With SP2013, is it possible to apply additional restrictions to what can be viewed by a user using a mobile device (specifically Windows Phone) as opposed to a desktop or laptop? We can assume that ...
1
vote
2answers
167 views

How to manage security for on-prem provider hosted apps that are published to SharePoint Online?

I have a provider hosted app where the web site is running locally (not in azure) and the SharePoint app will be published to SharePoint online. (so user connects to SharePoint online site, clicks on ...
2
votes
0answers
171 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article. This method gets the ...
0
votes
1answer
104 views

What user executes the code when running SPSecurity.RunWithElevatedPriveleges?

I have done research on this and still can't find a strong answer. Some soures say that when using SPSecurity.RunWithElevatedPriveleges that the code is executed as a site collection admin. Some ...
0
votes
0answers
10 views

Some of ADSecurity groups are not available fro permission

I have two AD Security group, one of the group is available in the Grant Permission page however other security group is not available. Any idea on what makes an ADSecurity group visible to ...
3
votes
1answer
523 views

Question on AD Groups and Sharepoint Groups

I have a security group inside Active Directory called 'Services'. I've added a number of users to the group. I then went into Sharepoint and added that group to the 'Contribute' sharepoint group. ...
0
votes
1answer
68 views

Allow users to post comment to a blog in SharePoint 2010 with out seeing the blog

I am currently trying to create a blog on our IT sub site where we discuss various topics. We would like to make it possible that every end user is able to make a post/comment on improvements they ...
0
votes
1answer
185 views

Security Validation Error

I'm trying to create a spweb in page_load via a control on the site. I get the error "The security validation for this page is invalid". I've got a postback (No GET-Request) and also tried ...
1
vote
1answer
400 views

SharePoint JavaScript Object Model Security and Permissions

I am writing an application whose logic executes in the browser using JSOM. The application might have permissions that exceed that of those who access the application. Let's say the application ...
1
vote
1answer
112 views

How to configure security (IIS, token, etc.) for a website that uses SharePoint 2013 REST API?

I have a website that uses the SharePoint 2013 REST API to render list data (via JQuery AJAX) on the website. It is pretty straightforward and works fine, but my challenge is figuring out the security ...
0
votes
0answers
34 views

Create users form SharePoint

In SharePoint, can you create users directly from a teamsite? i.e the users are not local computer users or Active directory users, but they are created and managed from SharePoint. This means that ...
0
votes
1answer
67 views

Web part SecurityException — System.Net.WebPermission failed — Farm Solution

I am getting an error with trying to make a HttpWebRequest inside a web part, I'm getting a SecurityException saying that System.Net.WebPermission failed. While searching for an answer, I came across ...
0
votes
1answer
146 views

SharePoint security based on Active Directory security groups not work

Please help me. In the organization , we have deployed SharePoint 2013 , to control access to sites decided through security group Active Directory. Active Directory security groups are added to the ...
0
votes
1answer
132 views

Can Active Directory Upgrade lead to problems with SharePoint?

Are there compatibility issues between SharePoint version and Active Directory version? I have a scenario with MOSS 2007 and Active Directory 2000. I will upgrade Active Directory to 2012. I ...
2
votes
2answers
957 views

How to check username/accountname under which the code runs?

We want piece of code which we can paste in the code behind and get the username under which code runs for:- (usually .NET code runs under account of application pool) Timer job. Event receiver. ...
0
votes
1answer
47 views

External Claims-Based SharePoint 2010 asking users for credentials on documents

I am running a SharePoint Foundation 2010 site which uses claims based authentication. (https://subdomain.domain.com). This is done using a Secure Token Provider. The authentication/authorization ...
0
votes
1answer
28 views

SharePoint installation using one-account method

please help me with one hard task. I am not able to convince some admins and neither whole companies that installing & using SharePoint by using one (local) account method is against all best ...
2
votes
2answers
499 views

How do I fetch the data from list present in root web of the root site collection?

We need to populate some data on an application page. The application page is present in the layouts folder and hence is accessible via the respective site URL. There are multiple site collections. ...
1
vote
1answer
248 views

Unique security scope number inside library

I have seen a recommendation, that there should be no more security scopes than 5000: For most farms, we recommend that you consider lowering this limit to 5,000 unique scopes. For large lists, ...
0
votes
1answer
84 views

Deny users access to site home, allow access to document library

I am using SharePoint Foundation 2010 and working on managing permissions at the moment. I would like all users to have access to the document library "Shared Documents". I would like only users part ...
1
vote
2answers
40 views

Strange permission behaviour

We have a SP 2010 system. We recently discovered that users with no permissions to a library are able to open documents in a library if provided with a direct url link to the document, thereby ...
2
votes
1answer
162 views

Limit number of users in a security group

I've a requirement like there should be only one user with some specific permissions on a given site. We should not allow Admin to add more than one user with those permissions, So I created a group ...
1
vote
1answer
74 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
0
votes
1answer
302 views

Can SPPersistedObject settings be updated by normal users if ran with elevated privileges?

I have a custom ribbon icon "Enlist" deployed to each document library. A normal (i.e. non-admin) user can click this icon; when he does, I would like to permanently save the document library ...
2
votes
2answers
435 views

Under what permissions/priviledge does the runwithelevatedprivileges code run?

SPSecurity.RunWithElevatedPrivileges Method Executes the specified method with Full Control rights even if the user does not otherwise have Full Control. 1) But which under which account does this ...
5
votes
1answer
3k views

“The XSS Auditor refused to execute a script in…” from Chrome when using <script> tag in content editor webpart

Embedding javascript in a content editor web part triggers XSS Auditor error in Chrome when editing any webpart on the page containing the content editor web part. Steps to reproduce 1 - Use newest ...
3
votes
1answer
143 views

How to make DIV tags accessible based on SharePoint role?

We have 3 DIV tags in master page (so, available to all pages on site). DIV 1: Employee DIV 2: Manager DIV 3: HR There are 3 groups in SharePoint:- Employee, Manager and HR. We want to make the ...
1
vote
0answers
16 views

Control all user traffic to Sharepoint Online

We are working on a gateway solution aimed for Sharepoint Online to control all user traffic and possibly, do changes on requests and responses. Is there any way to enforce/limit connections to ...
2
votes
1answer
3k views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
1
vote
1answer
72 views

Managing SharePoint groups at site/site collection level

SharePoint groups are created at site collection level and are assigned to a site. By site collection level it refers to root site. So, reframing the above sentence we get:- SharePoint groups are ...
2
votes
0answers
28 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
0
votes
3answers
512 views

List users in SharePoint group running as system

This works as local administrator only, but I'm trying to figure out how I can make it work with NT AUTHORITY\SYSTEM. It starts spitting out group members but fails with access denied on a specific ...
1
vote
1answer
132 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
0
votes
2answers
2k views

Prevent “Access Denied” error for domain users

I would like all members of the DOMAIN\Domain Users' or 'DOMAIN\Users' AD groups to have read-only access to a site collection and its subsites. I have added these groups to Site Permissions at the ...
2
votes
4answers
428 views

SharePoint user access not updating from AD Security Groups

I have a SharePoint site collection that has no direct user permissions set, we have a policy where users are added to a specific AD group to get access to different areas, your classic Role based ...
5
votes
1answer
408 views

What has changed that the security scope limit for SharePoint 2010 is no longer 1000?

What appear to be outdated blog posts everywhere tell you to not exceed 1,000 security scopes per list. Some even provide hard evidence as to why this is a bad idea. What they seem to have in common, ...
0
votes
1answer
71 views

Login page insted of login prompt in Sharepoint 2013

I have been create a Team Suite site in Sharepoint 2013.When any body try to start seeing site pages a logon window like below image display : How I can show custom login page instead of this ...
0
votes
3answers
290 views

What is best way manage SharePoint webpart access to database?

I have my custom webpart, which have access to database. I need to configure data source, catalog, username and password, which allows webpart a access database. I don't want that users can see, what ...
0
votes
1answer
219 views

CSOM Form based authentication Security issue

I'm new in sharepoint development, I was looking for authenticating users via CSOM by using forms based authentication and I found below code. ClientContext ctx = new ...
3
votes
2answers
485 views

Access Denied from Migrated SP2010 -> 2013 Web App

I've migrated a web application's content database from SP2010 to SP2013. After the migration was complete, I am completely locked out of the web application. Navigating to the root site collection ...
1
vote
1answer
2k views

The remote server returned an error: (401) Unauthorized. on new App

I created a new app by following this tutorial http://blogs.msdn.com/b/bspann/archive/2013/01/19/asp-net-mvc-based-apps-for-sharepoint-2013-on-premises.aspx I was able to press F5 and it showed me ...