Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
0answers
114 views

Unique security scope number inside library

I have seen a recommendation, that there should be no more security scopes than 5000: For most farms, we recommend that you consider lowering this limit to 5,000 unique scopes. For large lists, ...
0
votes
1answer
72 views

Deny users access to site home, allow access to document library

I am using SharePoint Foundation 2010 and working on managing permissions at the moment. I would like all users to have access to the document library "Shared Documents". I would like only users part ...
1
vote
2answers
40 views

Strange permission behaviour

We have a SP 2010 system. We recently discovered that users with no permissions to a library are able to open documents in a library if provided with a direct url link to the document, thereby ...
2
votes
1answer
78 views

Limit number of users in a security group

I've a requirement like there should be only one user with some specific permissions on a given site. We should not allow Admin to add more than one user with those permissions, So I created a group ...
1
vote
1answer
58 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
0
votes
0answers
28 views

Check user Permission for List Items

I need to set up custom permission cheking for List Item. For example: list have a PeoplePicker with some staffs and I need to set permission for this SPListItem for whole of this person and his ...
0
votes
1answer
164 views

Can SPPersistedObject settings be updated by normal users if ran with elevated privileges?

I have a custom ribbon icon "Enlist" deployed to each document library. A normal (i.e. non-admin) user can click this icon; when he does, I would like to permanently save the document library ...
2
votes
2answers
198 views

Under what permissions/priviledge does the runwithelevatedprivileges code run?

SPSecurity.RunWithElevatedPrivileges Method Executes the specified method with Full Control rights even if the user does not otherwise have Full Control. 1) But which under which account does this ...
4
votes
1answer
2k views

“The XSS Auditor refused to execute a script in…” from Chrome when using <script> tag in content editor webpart

Embedding javascript in a content editor web part triggers XSS Auditor error in Chrome when editing any webpart on the page containing the content editor web part. Steps to reproduce 1 - Use newest ...
0
votes
0answers
11 views

Should four different companies (with overlapping associates and security permissions) have diff. web applications

We have four companies that have similar ownership (and some overlapping associates) yet are separately formed corporations. In trying to setup an intranet site, I was wondering if we should have ...
0
votes
0answers
117 views

Using search with elevated permissions in a SharePoint Auto/Provider hosted App

I'm wondering if it's possible to search with "App Only" policy rights. The app scope 'Search' (available in Visual Studio) only allows me to select the "QueryAsUserIgnoreApp" permission. I already ...
3
votes
1answer
103 views

How to make DIV tags accessible based on SharePoint role?

We have 3 DIV tags in master page (so, available to all pages on site). DIV 1: Employee DIV 2: Manager DIV 3: HR There are 3 groups in SharePoint:- Employee, Manager and HR. We want to make the ...
1
vote
0answers
16 views

Control all user traffic to Sharepoint Online

We are working on a gateway solution aimed for Sharepoint Online to control all user traffic and possibly, do changes on requests and responses. Is there any way to enforce/limit connections to ...
1
vote
1answer
1k views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
1
vote
1answer
62 views

Managing SharePoint groups at site/site collection level

SharePoint groups are created at site collection level and are assigned to a site. By site collection level it refers to root site. So, reframing the above sentence we get:- SharePoint groups are ...
2
votes
0answers
22 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
0
votes
3answers
373 views

List users in SharePoint group running as system

This works as local administrator only, but I'm trying to figure out how I can make it work with NT AUTHORITY\SYSTEM. It starts spitting out group members but fails with access denied on a specific ...
0
votes
1answer
103 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
0
votes
2answers
1k views

Prevent “Access Denied” error for domain users

I would like all members of the DOMAIN\Domain Users' or 'DOMAIN\Users' AD groups to have read-only access to a site collection and its subsites. I have added these groups to Site Permissions at the ...
1
vote
4answers
221 views

SharePoint user access not updating from AD Security Groups

I have a SharePoint site collection that has no direct user permissions set, we have a policy where users are added to a specific AD group to get access to different areas, your classic Role based ...
4
votes
1answer
267 views

What has changed that the security scope limit for SharePoint 2010 is no longer 1000?

What appear to be outdated blog posts everywhere tell you to not exceed 1,000 security scopes per list. Some even provide hard evidence as to why this is a bad idea. What they seem to have in common, ...
0
votes
1answer
58 views

Login page insted of login prompt in Sharepoint 2013

I have been create a Team Suite site in Sharepoint 2013.When any body try to start seeing site pages a logon window like below image display : How I can show custom login page instead of this ...
0
votes
0answers
22 views

Get request information in IMSO_VirusScanner interface's scan and clean method

I am trying to get current sharepoint's request information in scan/clean method of SharePoint's IMSO_VirusScanner interface. We are getting SPContext in initialize method but not in scan/clean ...
0
votes
3answers
231 views

What is best way manage SharePoint webpart access to database?

I have my custom webpart, which have access to database. I need to configure data source, catalog, username and password, which allows webpart a access database. I don't want that users can see, what ...
0
votes
1answer
163 views

CSOM Form based authentication Security issue

I'm new in sharepoint development, I was looking for authenticating users via CSOM by using forms based authentication and I found below code. ClientContext ctx = new ...
3
votes
2answers
322 views

Access Denied from Migrated SP2010 -> 2013 Web App

I've migrated a web application's content database from SP2010 to SP2013. After the migration was complete, I am completely locked out of the web application. Navigating to the root site collection ...
1
vote
1answer
2k views

The remote server returned an error: (401) Unauthorized. on new App

I created a new app by following this tutorial http://blogs.msdn.com/b/bspann/archive/2013/01/19/asp-net-mvc-based-apps-for-sharepoint-2013-on-premises.aspx I was able to press F5 and it showed me ...
1
vote
1answer
70 views

Strange SharePoint behaviour regarding “Check Permissions” in a web part

I have a web part in which I am displaying users from User Profile Service which is synced with AD. In my code I get all the users in current site and then see if they are part of any group. If they ...
0
votes
1answer
174 views

Can we add OU in SharePoint security group

Can we add OU in SharePoint security group instead of adding users or AD group?
2
votes
0answers
48 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
0
votes
1answer
196 views

How to use versioning when using same .snk file for multiple SharePoint projects in the same solution?

I am trying to find the right way to set up my SharePoint solution with miltiple projects (in VS2012). In that, I am having difficulty understanding the concept of reusing the strong name key file. ...
1
vote
2answers
122 views

How to set a powershell variable to a specific sharepoint page

I have a SharePoint 2010 documents library that contains about 50 .aspx pages. I want to break inheritance on about 6 pages and set them to specific permissions. I am able to get a page by numerical ...
1
vote
3answers
4k views

How to get user security group name through javascript

I use the following code in javascript to display name of logged in user. SP.SOD.executeFunc('sp.js', 'SP.ClientContext', getUserData); Is there a code that will also tell me security group of ...
0
votes
2answers
62 views

Disabling direct access to list and library

I have a publishing site in which there are several lists and libraries. I am displaying some list and libraries on home page and applied XSLT on them to give them desired look and feel. There is a ...
1
vote
0answers
27 views

Fine-tuning SP2013 Document Library permissions

I have the need to give access to a role for creating documents and folders in a document library and giving access to another role to create documents (but not folders) How would I go about doing ...
0
votes
1answer
103 views

Access control on list items based on the item's value

How can I restrict permissions (read/write) on list items based on the item's value? For ( a simplistic) example, I have a list "Appraisals" which has two entries - Manager and Employee of type ...
0
votes
2answers
563 views

How do you stop the windows security window always appearing for your SharePoint lists when you connect to outlook

I have added a few SharePoint lists to my outlook (document sets and calendars) and every time I go into outlook it asks for windows credentials for every list/calendar, plus within SharePoint it asks ...
1
vote
1answer
429 views

Powershell to add users to custom security groups - getting 0x80070005 error

The following powershell reads an xml file and adds users to custom SharePoint security groups. If ([bool](([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) ...
1
vote
1answer
47 views

Sharepoint Foundation 2010 Hardening

I have never hardened a SharePoint site before and I am having a hard time using all the recommendations I find online. This blog post discusses the different accounts that should be used for ...
1
vote
0answers
107 views

FBA Custom login page to use 2 factor authentication - simplified

User provides an username/password. Should validate those and only then proceed to step 2. User provides an additional authentication token. If succeeds user is authenticated against SharePoint and ...
0
votes
2answers
817 views

SharePoint 2010 Top Link Inheritence and Permissions

We have an issue in SharePoint (Enterprise) 2010 with our Top Link NavBar inheritance and permissions across sub-sites. Current Configuration We have a root site collection: RSC1. Under the root ...
1
vote
2answers
2k views

Use Outlook distribution list as SharePoint security group

I got across this question, is it possible to use an Outlook distribution list as SharePoint security group? Let's say that I have a mail group and I need to use it as the Members group of one of my ...
0
votes
1answer
131 views

Limited Access permission being applied for a user at the root site

I have a list where security inheritance is not enabled. On adding an item to a list in the ItemAdded event receiver I'm applying custom security to the list item. The consequence of doing this is ...
2
votes
1answer
21 views

mandatory security group

trying to solve a permission issue. We have created a custom permission level called Site Owner that removes the ability to create subsites but keeps everything else, including the ability to edit ...
1
vote
3answers
38 views

Why can people change other people's items even though I set it up not to?

I have created a shared list where members can add new items and edit their own items. These members only have the ability to contribute, and not the ability to manage lists. In the list's advanced ...
1
vote
1answer
194 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
0answers
28 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
2
votes
1answer
43 views

Audit the adminstrator

we are looking into the possibility of outsouring the administration of our farm. Because of the nature of sensitive data inside some of the site collection, we want to prevent data leakage. We want ...
0
votes
2answers
498 views

Using JavaScript to redirect a page

I am using JavaScript to redirect users who aren't owners to a different page. I am using $(document).ready(function() { //check owner status if(!isOwner) { ...
1
vote
2answers
488 views

How can I learn how to create a delegation engine? [closed]

One of the last places I worked at had a delegation engine in SharePoint, a SharePoint List that specified the SharePoint groups that would be sought for approval for a workflow based on that ...