Security is the protection of information and property from theft.

learn more… | top users | synonyms

4
votes
2answers
62 views

SharePoint 2013 - Unique permissions for claims

This is about SharePoint 2013 On-Premise environment. We've a scenario in which certain content is authored in source site collection and published to a target site collection via cross-site ...
3
votes
1answer
69 views

What does “Security validation expires” do?

We have mixed authentication on our SharePoint 2013 site collection. I need to have FBA users automatically logged out after 30 minutes of inactivity, but they don't have to necessarily be redirected ...
3
votes
1answer
363 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
2
votes
1answer
229 views

SharePoint won’t report active directory domain user permissions inherited from active directory domain security groups nested in SharePoint groups?

For instance: ads\mdepnorm aka MDEP TSST Norman Testing is in SP-CONTRIBUTORS ADS security group: . The sp-contributors ADS group is in SharePoint group Intranet Members: . It follows that if I ...
2
votes
1answer
375 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
2
votes
1answer
3k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
1
vote
1answer
32 views

What Share permissions am i forgetting?

Hi I've setup a 2013 Sharepoint site on my companies 365 org and none of my users can see the documents in the folder. The users are signed in properly and i've shared the folders with NT ...
1
vote
1answer
196 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
1
vote
1answer
36 views

Managing Site Permissions

I am new to SharePoint and having some difficulty setting up the appropriate permissions. My organization uses a primary landing page that only a few have Owner/Full Control rights to, and then that ...
1
vote
1answer
45 views

system security error when running Sharepoint 2010 Products Configuration Wizard

Background: A few months ago, my company had an issue which resulted in creating a new domain, and migrating all computers and servers to the new domain, including a Sharepoint 2010 installation. At ...
1
vote
1answer
38 views

HR Libraries Scenario >> Employee libraries and security via AD

We have a scenario in 2013 where we are proposing a library per employee to hold HR documents. We'd have a dropoff library that would route the document to the proper library which is based off the ...
1
vote
1answer
79 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
1
vote
1answer
159 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
1
vote
1answer
271 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
1answer
115 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
1
vote
1answer
98 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
1
vote
1answer
111 views

Sharepoint: Retrieve info on assigned user policy

A question from stackoverflow Case: Create a User Policy in SharePoint 2010 Web Application Management: assign 'Full read' to user XXX for site YYY; Call SiteData.asmx/GetContent for site YYY and ...
1
vote
1answer
2k views

Exception occurred while connecting to wcf endpoint

I get very strange exception: "exception occured while connecting to wcf endpoint. Access denied" Only when I go to any Document Library. I have logged as Administrator and I have added ...
1
vote
1answer
182 views

Authentication - multiple web domains

We use claims based authentication and have one application running, say www.abc.com This application authenticates against AD via claimns provider. We would like to deploy another web site: ...
0
votes
1answer
30 views

SharePoint 2013 - Verify Active Directory security group membership in Master Page javascript

I desire to add some JavaScript that will verify the current users AD security group membership. If a member of group 'A' the logic will redirect one way. If not in group 'A', but in group 'B' the ...
0
votes
1answer
11 views

Determine what user was deleted from a security group in the audit logs

I have configured the site collection audit settings to monitor permission changes. In the Audit log reports->Security settings I get an excel report with Security Group Member Delete events. The ...
0
votes
1answer
6 views

Grant permission on a file basis?

is there a way to grant access to individual files in a report library? So can I have a report library, and in it a folder and in the folder 3 files where only some people can access file one, and ...
0
votes
1answer
26 views

How can I secure _vti_pvt folders?

I am dealing with a security report from an external contractor, in which there is a finding labeled as a medium risk. It is titled IIS .cnf file leakage. This is somewhat confusing to me, since ...
0
votes
1answer
97 views

Remove user/group from everyone group SharePoint online

Is there a way to exclude a user or group from the 'everyone' security group in SP Online? The reason I ask is we have blog site which everyone needs to be able to contribute to, simple - but we ...
0
votes
1answer
155 views

Error : Group cannot be found

I deleted Team Site Owners group from the top level team site in SharePoint Online and found that the people and groups link from the settings page is not working, throwing an error: Group cannot ...
0
votes
1answer
50 views

Restrict permissions/access to list items in code

Does anyone know a way to restrict access to list items in code, even if someone has full control on a list item, deny that in code. I know there is a way for updating using event receiver, but I'm ...
0
votes
1answer
32 views

SP2013 unknown reason for access issues

I added an AD user to group "Site Members" in a SharePoint 2013 application. Group "Site Members" has Contribute permissions at the site root, and there are no restrictive permissions listed when ...
0
votes
1answer
78 views

Allow others to see picture, but deny access to mysite

We are sharing parts of our SharePoint 2013 enterprise site with our customers. Security-wise this can be managed pretty well, but I have one problem. Customers do see employee photo & names (next ...
0
votes
1answer
308 views

User Authentication in Sharepoint and OTP

Currently we have SharePoint installed in our production environment. We are only on intranet currently, but we would like to make our SP accessible from internet and web URLs. Currently for ...
0
votes
1answer
157 views

SharePoint security based on Active Directory security groups not work

Please help me. In the organization , we have deployed SharePoint 2013 , to control access to sites decided through security group Active Directory. Active Directory security groups are added to the ...
0
votes
1answer
39 views

SharePoint installation using one-account method

please help me with one hard task. I am not able to convince some admins and neither whole companies that installing & using SharePoint by using one (local) account method is against all best ...
0
votes
1answer
90 views

Deny users access to site home, allow access to document library

I am using SharePoint Foundation 2010 and working on managing permissions at the moment. I would like all users to have access to the document library "Shared Documents". I would like only users part ...
0
votes
1answer
50 views

Extended Web application

For my project I need to convert a Classic mode Authentication WebApplication (name Sharepoint - 8080) to Claims and add Forms Based Authentication to it. For that matter I extended the webapplication ...
0
votes
1answer
66 views

Creating a column that can only be modified by a group of people

I am creating a simple list (imagine a request for instance) in Sharepoint. This list can be modified by the user, but the field "Status" (Approved, rejected, waiting, -And any status I could imagine) ...
0
votes
1answer
2k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
0
votes
1answer
54 views

Securing files in a library by a people column?

SharePoint Online 2013. Library with a people column added. For the site owner, they can add files at will, but must select a person for that column for every file. But for library members, we ...
0
votes
1answer
30 views

Permissions needed by System security officer

In our current setup. I am responsible for Sharepoint in our company. This means that I do everything from deploying to application support to giving users rights to the platform when it is required. ...
0
votes
1answer
71 views

Service account to access UNC

I'm trying to access the UNC to copy a file from the UNC share to another location. The way it is set up it requires an interactive challenge for credentials, and I was told there is no way to change ...
0
votes
1answer
117 views

SharePoint 2013 Site Collection Move Owner to Group

I am in process of migrating our WSS 3.0 installation to 2013 and I am at the point where I need to break the single site collection down into more manageable sizes and I have a script that ...
0
votes
1answer
41 views

Accessing word docs on Sharepoint site. Are files cached locally?

My client wants users to access word and excel docs through the company SharePoint site from remote locations, however he does not want them to have access to the files after they have logged off the ...
0
votes
1answer
33 views

Maintaining role groups and users in two farms simultaneously?

We currently have two farms - a SharePoint 2007 one and a SharePoint 2010 one. We have the same groups in both farms and the same userbase. At the moment when someone joins or leaves the company ...
0
votes
1answer
116 views

sharepoint 2010 hide admin pages

I have several lists on a public facing sharepoint site that are open to the public. These are simple lookup lists and this configuration can't change (not my call). Since users have access to the ...
0
votes
1answer
97 views

Only give permission to modify/delete a list item to the user that created it

I have created a simple Hyperlink list on which everyone can create, edit and delete items. Now I need to add some more restrictive permissions similar to the following: Only the users that created ...
-1
votes
1answer
21 views

secondary administrator for manage share point farm

we have a SharePoint farm and i have one user account this user has full permissions to whole SharePoint farm servers and web applications. but i want to create another user for secondary ...
0
votes
0answers
35 views

Create users form SharePoint

In SharePoint, can you create users directly from a teamsite? i.e the users are not local computer users or Active directory users, but they are created and managed from SharePoint. This means that ...
0
votes
0answers
70 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...
0
votes
0answers
21 views

Security level on SP13

This is the scenario: I have a SP13 in which I'm deploying a File Server, so I created one web application and inside of it one Site Collection for each department. I give Full Control access to a ...
0
votes
0answers
97 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
0
votes
0answers
118 views

Proper way to get all lists of a certain type from an entire site collection regardless of current location

I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal. I'm currently using the following, but can't ...
0
votes
0answers
118 views

Users denied access to certain site collection until an administrator opens it

We are having a problem with users getting "Access denied" errors when trying to access a certain site collection. These users all have the proper permissions to the site and have accessed it in the ...