Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
0answers
23 views

How can I have end-users visualizing different dimensions from the same Powerpivot on same excel file?

I need help to understand if it is possible to have end-users visualizing different dimensions from the same excel file published in Sharepoint 2013. I have a data warehouse in SQL Server 2012 and ...
0
votes
2answers
153 views

Relation between an FBA Role and SharePoint Group

I have worked with FBA Membership using SQL. Once we add a Membership User, we can create an equivalent SPUser in SharePoint. But I am not sure how I can establish that kind of a relationship ...
1
vote
0answers
26 views

Sharepoint Active Directory Users/Groups

I'm currently testing some things in SharePoint (Trial/Developer mode). Current setup: SharePoint 2013 Server Domain Controller with 2008 R2 (Active Directory). I've configured the SharePoint option ...
0
votes
1answer
87 views

web.DoesUserHavePermissions returns true, though user gets access denied page

I've seen this question a couple times, but yet to find a scenario or answer which helps me. I am building up a cross-site navigation menu, and when building the menu I look at each site and want to ...
0
votes
0answers
33 views

Security Trimming, Shared Folders, Limited Access and Possible Workarounds

I'd like to have both security trimming and shared folders within my site collection. This is seemingly impossible, as to allow shared folders you need to turn off Limited Access Lock Down. I was ...
0
votes
0answers
20 views

User account limited access to site settings and unable to access some subsites

The account in question is supposed to be an administrative type account, having access to all things. The account has been configured in the User Policy for the Web Application for Full Control ...
2
votes
1answer
628 views

In what Security Zone should SharePoint Online (Office 365) be added?

I was wondering in what Security Zone SharePoint Online (Office 365) should be added? I'm not sure if the Office 365 site(s) belong in the security zone Trusted Sites Zone or in Local Intranet Zone. ...
0
votes
1answer
47 views

Unable to connect to SQL on aspnet_regsql.exe

I have a standalone environment, and I am trying to configure FBA on my local machine, I ran aspnet_regsql.exe, and it said it's unable to connect to SQL. The account am using is the sp_admin ...
0
votes
0answers
158 views

Getting an Access Denied when clicking on the Documents link in MySite

When I click on the Documents, Tasks, or Documents link in the left nav in MySite I get an access denied error (go to ...
3
votes
2answers
95 views

Item Level Security Question

Good Afternoon, Seeking advice for setting security on a custom SP2013 list. All users need to be able to create a new item in the list. Users should not see items created by others. So far, I set ...
0
votes
1answer
26 views

Admin access when the admin password has changed in AD

I have a demo/test (luckily) build of Sharepoint 2013 running on a server in-house. When I set it up it asked me to allocate a domain user as the admin, I use my own domain admin account (from Active ...
0
votes
0answers
18 views

How to add security to sharepoint custom WCF service

I've made a custom wcf service under sharepoint 2013, but if i call the service directly (no auth no security=, it work... any suggestions to make the service secured? Thank you very much for any ...
1
vote
1answer
106 views

SharePoint 2013 - user automatically logged in with other user's credentials - how is that possible?

We recently had the following problem with SharePoint 2013: User A suddenly was logged in on his computer with the name of another user (user B). Both use Windows 7 and Google chrome as browser. ...
0
votes
2answers
2k views

The context has expired and can no longer be used. (Exception from HRESULT: 0x80090317)

I am facing this error all day long and I have not figured it out yet. I have tried: setting the date time zone in the web application to match that of the server set "security validation expires" ...
0
votes
0answers
71 views

SharePoint 2013 - Verify Active Directory security group membership in Master Page javascript

I desire to add some JavaScript that will verify the current users AD security group membership. If a member of group 'A' the logic will redirect one way. If not in group 'A', but in group 'B' the ...
0
votes
1answer
108 views

Determine what user was deleted from a security group in the audit logs

I have configured the site collection audit settings to monitor permission changes. In the Audit log reports->Security settings I get an excel report with Security Group Member Delete events. The ...
0
votes
1answer
18 views

Site Analytics also for non Site Owners possible?

Is it possible to make the Popularity and Search Reports accessible to contributors and not only owners?
0
votes
0answers
11 views

Project task and my task in SharePoint 2010

I have created a project Task and My tasks in sharepoint 2010. I have noticed that this is not getting linked. eg: When I create a project task and assign it to me, it does not display on my tasks ...
1
vote
1answer
37 views

AllowUnsafeUpdate on POST request

I am getting good old "The security validation for this page is invalid" on Sharepoint 2013, while updating list in Sharepoint, due to button click on an application page. In browser, I clearly see, ...
0
votes
0answers
114 views

SharePoint Provider Hosted App SharePointContextFilter on Web API

I am writing a SharePoint provider hosted app that also contains a web api (ApiController). When I apply the [SharePointContextFilter] on top of the action nothing happens, it does redirect the ...
1
vote
1answer
48 views

How to give a consultant access into sharepoint

I have a consultant joining into my company and unfortunately he will not have my company email address. Is there a way I can give him SharePoint access to the site on which he is going to work on? ...
1
vote
1answer
33 views

Sharepoint Library document security

I am hoping there is some help out there with this question. Currently we are configuring a specific library we have set up on SharePoint to act as our IMS (Integrated Management System) Document ...
0
votes
0answers
28 views

Ways to fix Session fixation in SharePoint 2010

A penetration test was done on our SharePoint instance at the report shows a high risk of Session Fixation More about it here I know this is a built in ASP.NET way when doing Forms Auth. But we dont ...
0
votes
1answer
8 views

Grant permission on a file basis?

is there a way to grant access to individual files in a report library? So can I have a report library, and in it a folder and in the folder 3 files where only some people can access file one, and ...
1
vote
1answer
33 views

What Share permissions am i forgetting?

Hi I've setup a 2013 Sharepoint site on my companies 365 org and none of my users can see the documents in the folder. The users are signed in properly and i've shared the folders with NT ...
0
votes
2answers
265 views

use sharepoint to allow access to external users across secure server

I am working for an organization that is using SharePoint 2010. We have to collaborate with people from different departments working at different locations using different servers. Does SharePoint ...
0
votes
1answer
163 views

How can I secure _vti_pvt folders?

I am dealing with a security report from an external contractor, in which there is a finding labeled as a medium risk. It is titled IIS .cnf file leakage. This is somewhat confusing to me, since ...
0
votes
1answer
67 views

Sharepoint 2010 : XSS attacks

Recently i found out that application in sharepoint 2010 vulnerable to XSS attacks . http://tools.cisco.com/security/center/viewAlert.x?alertId=34048 The XSS attack is something like : an attacker ...
1
vote
0answers
58 views

How to redirect a user to a sharepoint online site when using custom login

I would like to have a custom login to my SharePoint Online. I can authenticate successfully by doing the below : var targetSite = new Uri("https://<site_url>"); var login = ...
0
votes
0answers
52 views

Check if the user is in a specific SP security group in the XSL for a DVWP?

I know it is possible to see if the user has access to the list with ddwrt:IfHasRights but I'm wondering if there is a way to check if a user is part of a specific security group? I'd like to be able ...
0
votes
2answers
56 views

Security performance Issues

I'm kind of new in Sharepoint and I've read that you have performance issues if you set the security at the document level but this happen if you create let's say 3 folders in the library and then you ...
0
votes
1answer
16 views

Create only certain types of Apps in SharePoint 2013

Is there a way to restrict users to create only certain types of Apps in SharePoint, for example let's say that I just want to allow them just to create Document Libraries and not Lists, Calendars, ...
-1
votes
1answer
24 views

secondary administrator for manage share point farm

we have a SharePoint farm and i have one user account this user has full permissions to whole SharePoint farm servers and web applications. but i want to create another user for secondary ...
1
vote
0answers
18 views

Item permissions changed

I have a question because i cant explain why something happend. Suddenly the item permissions on several items are changed. An AD group is gone as a permissions group and instead i see the ...
4
votes
2answers
115 views

SharePoint 2013 - Unique permissions for claims

This is about SharePoint 2013 On-Premise environment. We've a scenario in which certain content is authored in source site collection and published to a target site collection via cross-site ...
3
votes
1answer
563 views

What does “Security validation expires” do?

We have mixed authentication on our SharePoint 2013 site collection. I need to have FBA users automatically logged out after 30 minutes of inactivity, but they don't have to necessarily be redirected ...
0
votes
1answer
53 views

SharePoint lists and libraries are accessible without any authentication

I am new to SharePoint development, I am building an internet facing website with anonymous permissions for the pages, my current situation is that my lists are accessible without any security upon ...
1
vote
1answer
88 views

Can I set alerts for an AD group without having exchange?

We have our security groups coming from AD on the AD import. A user wants to set an alert on a list to notify the group when something changes. The group is a global security group. I can set the ...
0
votes
1answer
307 views

Remove user/group from everyone group SharePoint online

Is there a way to exclude a user or group from the 'everyone' security group in SP Online? The reason I ask is we have blog site which everyone needs to be able to contribute to, simple - but we ...
0
votes
1answer
28 views

Permission levels based on terms

I'm new to SharePoint (working with SP 2013 Enterprise on-premises) and have a question. Consider we have several privacy levels stored in a termset and a SharePoint list. Privacy term is a field of ...
1
vote
2answers
13 views

Security and backup if documents in library are not synced

Is there any reason why I would not want to store all of my business documents and not sync them? Should I have any concerns about security or losing data? I don't need to have my documents synced ...
0
votes
2answers
683 views

Encrypting files and documents in Sharepoint 2013

I want to host confidential data on Sharepoint 2013 and would like to encrypt these data on a file level. There is already a Transparent Data Encryption (TDE) feature available for Sharepoint but it ...
2
votes
1answer
345 views

what need to be done when we change the manage account password from the Active directory

We have changed the passwords for the SP manage accounts inside our active directory. So I login to the SP server, then i changed the application pool identify passwords accordingly. Then I went to ...
0
votes
1answer
74 views

Item-level Security on SSRS report from SharePoint list

We have created an SSRS report from SharePoint 2010 list. We have item level permission in the source list, so the user can view only the items for which they have privilege. But in SSRS report it ...
1
vote
1answer
374 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
1
vote
0answers
51 views

Allow access to enter data , but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
1
vote
1answer
640 views

Error : Group cannot be found

I deleted Team Site Owners group from the top level team site in SharePoint Online and found that the people and groups link from the settings page is not working, throwing an error: Group cannot ...
1
vote
1answer
301 views

Different URLS for different auth providers, under one web application and site collection

We have a single site collection setup within a web application. The site collection has one top-level site, and the setup has one content database. The application is using Forms authentication for ...
1
vote
0answers
40 views

SharePoint setup where admin has no access to data

We have a customer who want's to store sensitive data on SharePoint which should only be accessed from a few members of the company. This would be no problem with SharePoint group policies, but we ...
0
votes
1answer
106 views

Restrict permissions/access to list items in code

Does anyone know a way to restrict access to list items in code, even if someone has full control on a list item, deny that in code. I know there is a way for updating using event receiver, but I'm ...