Security is the protection of information and property from theft.

learn more… | top users | synonyms

3
votes
1answer
154 views

Security Error while doing REST update on the SP list

I am trying to make update with the usage of REST but I got an error: -2130575251, Microsoft.SharePoint.SPException. The security validation for this page is invalid and might be corrupted. ...
3
votes
1answer
702 views

What does “Security validation expires” do?

We have mixed authentication on our SharePoint 2013 site collection. I need to have FBA users automatically logged out after 30 minutes of inactivity, but they don't have to necessarily be redirected ...
3
votes
1answer
5k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
3
votes
1answer
390 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
2
votes
1answer
17 views

Changing Permissions to a List Item Changes Permissions to the Entire List

I have a custom list in SP2010 where I need each item to be available only to the person who created it. A workflow like the one described in this article helped get that working. After an item is ...
2
votes
1answer
603 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
1
vote
1answer
363 views

SharePoint 2010 - disable SSLv3 and TLS 1.0

I'm tasked to figure out how to disable SSLv3 and TLS 1.0 on SharePoint 2010 farm. After some reading, I came to the following conclusions: It is safe to disable SSLv3 on SharePoint servers, It is ...
1
vote
1answer
34 views

What Share permissions am i forgetting?

Hi I've setup a 2013 Sharepoint site on my companies 365 org and none of my users can see the documents in the folder. The users are signed in properly and i've shared the folders with NT AUTHORITY\...
1
vote
1answer
428 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
1
vote
1answer
775 views

Error : Group cannot be found

I deleted Team Site Owners group from the top level team site in SharePoint Online and found that the people and groups link from the settings page is not working, throwing an error: Group cannot ...
1
vote
1answer
40 views

Managing Site Permissions

I am new to SharePoint and having some difficulty setting up the appropriate permissions. My organization uses a primary landing page that only a few have Owner/Full Control rights to, and then that ...
1
vote
1answer
57 views

system security error when running Sharepoint 2010 Products Configuration Wizard

Background: A few months ago, my company had an issue which resulted in creating a new domain, and migrating all computers and servers to the new domain, including a Sharepoint 2010 installation. At ...
1
vote
1answer
107 views

HR Libraries Scenario >> Employee libraries and security via AD

We have a scenario in 2013 where we are proposing a library per employee to hold HR documents. We'd have a dropoff library that would route the document to the proper library which is based off the ...
1
vote
1answer
83 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
1
vote
1answer
235 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
1
vote
1answer
368 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
1answer
130 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
1
vote
1answer
2k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
1
vote
1answer
121 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created from)....
1
vote
1answer
128 views

Sharepoint: Retrieve info on assigned user policy

A question from stackoverflow Case: Create a User Policy in SharePoint 2010 Web Application Management: assign 'Full read' to user XXX for site YYY; Call SiteData.asmx/GetContent for site YYY and ...
1
vote
1answer
185 views

Authentication - multiple web domains

We use claims based authentication and have one application running, say www.abc.com This application authenticates against AD via claimns provider. We would like to deploy another web site: www.xyz....
0
votes
1answer
25 views

Does the latest SP 2013 security update contains all the previous ones like CUs?

I need to apply security updates to my production server to match my dev server. I am seeing a list of Sharepoint securiy updates installed on the DEV . Do i need to install all of them to Prod in ...
0
votes
1answer
17 views

Security report

I am looking for a tool able to perform a cumulative report of SharePoint rights, AD groups and IRM rights, at document level in a given library.
0
votes
1answer
42 views

Need script to list Groups by Team Site

I am trying to find PowerShell scripts that do the following: List all TeamSites. List all TeamSites, Groups that belong to that TeamSite with their permissions. List all TeamSites, Groups that ...
0
votes
1answer
22 views

SharePoint List Custom Security Features

Is there a way to customize security features based on who created a list item? Examples: Managers should only be able to see those they have requested Directors should be able to see anyone that ...
0
votes
1answer
57 views

Unable to connect to SQL on aspnet_regsql.exe

I have a standalone environment, and I am trying to configure FBA on my local machine, I ran aspnet_regsql.exe, and it said it's unable to connect to SQL. The account am using is the sp_admin ...
0
votes
1answer
28 views

Admin access when the admin password has changed in AD

I have a demo/test (luckily) build of Sharepoint 2013 running on a server in-house. When I set it up it asked me to allocate a domain user as the admin, I use my own domain admin account (from Active ...
0
votes
1answer
164 views

Determine what user was deleted from a security group in the audit logs

I have configured the site collection audit settings to monitor permission changes. In the Audit log reports->Security settings I get an excel report with Security Group Member Delete events. The ...
0
votes
1answer
9 views

Grant permission on a file basis?

is there a way to grant access to individual files in a report library? So can I have a report library, and in it a folder and in the folder 3 files where only some people can access file one, and ...
0
votes
1answer
206 views

How can I secure _vti_pvt folders?

I am dealing with a security report from an external contractor, in which there is a finding labeled as a medium risk. It is titled IIS .cnf file leakage. This is somewhat confusing to me, since ...
0
votes
0answers
20 views

List Sharepoint groups powershell - missing groups

I am using this code to list all groups within a web app. When I look at results not all the groups are there. When I go to the root of the site - people and groups, the groups are there. Why are ...
0
votes
0answers
23 views

Access Issue for “Robots.txt” in SharePoint WCM site

I have enabled robots.txt on my SharePoint site by activating the Search Engine Sitemap Site Collection Feature as mentioned in this post. I also edited the robots.txt through "Search Engine Sitemap ...
0
votes
0answers
19 views

Validate context from SharePoint site to hosted provider

I'm developing a Provider-Hosted SharePoint App that provides sensitive data. Is there any best way to validate that the access from SharePoint comes from corrent SharePoint? The validation method ...
0
votes
0answers
6 views

2013: security logs do not show data after site creation

The reporting is activated and some reports do work. For the security one it only shows some automated actions at the site creations but no logging of people being added or people being deleted. What ...
0
votes
0answers
29 views

Office 365 SharePoint - Individual File Sharing

I have been debating with my internal team whether to allow the end user to share individual files or not and have also been talking about the potential problem which may arise due to giving each file ...
0
votes
0answers
40 views

Security Exception while trying to start User Profile Synchronization through Web Part

I am new to SharePoint. I have setup SharePoint using least privilege principle and I am trying to start incremental user profile synchronisation through a web part(it works fine when manually doing ...
0
votes
0answers
35 views

Security Trimming, Shared Folders, Limited Access and Possible Workarounds

I'd like to have both security trimming and shared folders within my site collection. This is seemingly impossible, as to allow shared folders you need to turn off Limited Access Lock Down. I was ...
0
votes
0answers
20 views

User account limited access to site settings and unable to access some subsites

The account in question is supposed to be an administrative type account, having access to all things. The account has been configured in the User Policy for the Web Application for Full Control ...
0
votes
0answers
184 views

Getting an Access Denied when clicking on the Documents link in MySite

When I click on the Documents, Tasks, or Documents link in the left nav in MySite I get an access denied error (go to 'mysite/_layouts/15/AccessDenied.aspx?Source=http%3A%2F%2Fmysite%2FShared%...
0
votes
0answers
19 views

How to add security to sharepoint custom WCF service

I've made a custom wcf service under sharepoint 2013, but if i call the service directly (no auth no security=, it work... any suggestions to make the service secured? Thank you very much for any ...
0
votes
0answers
79 views

SharePoint 2013 - Verify Active Directory security group membership in Master Page javascript

I desire to add some JavaScript that will verify the current users AD security group membership. If a member of group 'A' the logic will redirect one way. If not in group 'A', but in group 'B' the ...
0
votes
0answers
64 views

get error when adding a user to a group site permissions - SharePoint 2010 on premises

I need some help here . Not sure if anyone as gone through this before. But when i try to add user to a group or to anything in sharepoint via site permissions i get an error and a coreelation id. I ...
0
votes
0answers
1k views

Share a folder (break inheritance), access denied

I have a problem in Sharepoint 2013 which is reproducible. Create a document library on any site. Create a folder in this library. Break inheritance on this folder and add a user that doesn't have ...
0
votes
0answers
293 views

IE default security settings block any App scripts from running

I wrote a Sharepoint-hosted app for use by a single company. But in order for my javascript to execute on their local intranet, which uses Microsoft Windows Server 2008, I have to instruct them to ...
0
votes
0answers
221 views

FBA Active Directory Security Groups Not Working SP 2013

So I have in active directory one security group, lets call it "Shrpt_Users". Within SharePoint I have granted this Active directory group read rights to my sub site: "Advertising". My user ...
0
votes
0answers
35 views

Create users form SharePoint

In SharePoint, can you create users directly from a teamsite? i.e the users are not local computer users or Active directory users, but they are created and managed from SharePoint. This means that ...
0
votes
0answers
76 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...
0
votes
0answers
22 views

Security level on SP13

This is the scenario: I have a SP13 in which I'm deploying a File Server, so I created one web application and inside of it one Site Collection for each department. I give Full Control access to a ...
0
votes
0answers
134 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
0
votes
0answers
137 views

Proper way to get all lists of a certain type from an entire site collection regardless of current location

I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal. I'm currently using the following, but can't ...