Security is the protection of information and property from theft.

learn more… | top users | synonyms

3
votes
1answer
47 views

Security Error while doing REST update on the SP list

I am trying to make update with the usage of REST but I got an error: -2130575251, Microsoft.SharePoint.SPException. The security validation for this page is invalid and might be corrupted. ...
3
votes
1answer
330 views

What does “Security validation expires” do?

We have mixed authentication on our SharePoint 2013 site collection. I need to have FBA users automatically logged out after 30 minutes of inactivity, but they don't have to necessarily be redirected ...
3
votes
1answer
4k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
3
votes
1answer
380 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
2
votes
1answer
427 views

SharePoint won’t report active directory domain user permissions inherited from active directory domain security groups nested in SharePoint groups?

For instance: ads\mdepnorm aka MDEP TSST Norman Testing is in SP-CONTRIBUTORS ADS security group: . The sp-contributors ADS group is in SharePoint group Intranet Members: . It follows that if I ...
2
votes
1answer
465 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
1
vote
1answer
33 views

What Share permissions am i forgetting?

Hi I've setup a 2013 Sharepoint site on my companies 365 org and none of my users can see the documents in the folder. The users are signed in properly and i've shared the folders with NT ...
1
vote
1answer
267 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
1
vote
1answer
418 views

Error : Group cannot be found

I deleted Team Site Owners group from the top level team site in SharePoint Online and found that the people and groups link from the settings page is not working, throwing an error: Group cannot ...
1
vote
1answer
39 views

Managing Site Permissions

I am new to SharePoint and having some difficulty setting up the appropriate permissions. My organization uses a primary landing page that only a few have Owner/Full Control rights to, and then that ...
1
vote
1answer
54 views

system security error when running Sharepoint 2010 Products Configuration Wizard

Background: A few months ago, my company had an issue which resulted in creating a new domain, and migrating all computers and servers to the new domain, including a Sharepoint 2010 installation. At ...
1
vote
1answer
74 views

HR Libraries Scenario >> Employee libraries and security via AD

We have a scenario in 2013 where we are proposing a library per employee to hold HR documents. We'd have a dropoff library that would route the document to the proper library which is based off the ...
1
vote
1answer
81 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
1
vote
1answer
190 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
1
vote
1answer
324 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
1answer
118 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
1
vote
1answer
2k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
1
vote
1answer
110 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
1
vote
1answer
119 views

Sharepoint: Retrieve info on assigned user policy

A question from stackoverflow Case: Create a User Policy in SharePoint 2010 Web Application Management: assign 'Full read' to user XXX for site YYY; Call SiteData.asmx/GetContent for site YYY and ...
1
vote
1answer
182 views

Authentication - multiple web domains

We use claims based authentication and have one application running, say www.abc.com This application authenticates against AD via claimns provider. We would like to deploy another web site: ...
0
votes
1answer
21 views

SharePoint List Custom Security Features

Is there a way to customize security features based on who created a list item? Examples: Managers should only be able to see those they have requested Directors should be able to see anyone that ...
0
votes
1answer
30 views

Unable to connect to SQL on aspnet_regsql.exe

I have a standalone environment, and I am trying to configure FBA on my local machine, I ran aspnet_regsql.exe, and it said it's unable to connect to SQL. The account am using is the sp_admin ...
0
votes
1answer
22 views

Admin access when the admin password has changed in AD

I have a demo/test (luckily) build of Sharepoint 2013 running on a server in-house. When I set it up it asked me to allocate a domain user as the admin, I use my own domain admin account (from Active ...
0
votes
1answer
46 views

Determine what user was deleted from a security group in the audit logs

I have configured the site collection audit settings to monitor permission changes. In the Audit log reports->Security settings I get an excel report with Security Group Member Delete events. The ...
0
votes
1answer
7 views

Grant permission on a file basis?

is there a way to grant access to individual files in a report library? So can I have a report library, and in it a folder and in the folder 3 files where only some people can access file one, and ...
0
votes
1answer
100 views

How can I secure _vti_pvt folders?

I am dealing with a security report from an external contractor, in which there is a finding labeled as a medium risk. It is titled IIS .cnf file leakage. This is somewhat confusing to me, since ...
0
votes
1answer
216 views

Remove user/group from everyone group SharePoint online

Is there a way to exclude a user or group from the 'everyone' security group in SP Online? The reason I ask is we have blog site which everyone needs to be able to contribute to, simple - but we ...
0
votes
1answer
70 views

Restrict permissions/access to list items in code

Does anyone know a way to restrict access to list items in code, even if someone has full control on a list item, deny that in code. I know there is a way for updating using event receiver, but I'm ...
0
votes
1answer
34 views

SP2013 unknown reason for access issues

I added an AD user to group "Site Members" in a SharePoint 2013 application. Group "Site Members" has Contribute permissions at the site root, and there are no restrictive permissions listed when ...
0
votes
1answer
80 views

Allow others to see picture, but deny access to mysite

We are sharing parts of our SharePoint 2013 enterprise site with our customers. Security-wise this can be managed pretty well, but I have one problem. Customers do see employee photo & names (next ...
0
votes
1answer
446 views

User Authentication in Sharepoint and OTP

Currently we have SharePoint installed in our production environment. We are only on intranet currently, but we would like to make our SP accessible from internet and web URLs. Currently for ...
0
votes
1answer
175 views

SharePoint security based on Active Directory security groups not work

Please help me. In the organization , we have deployed SharePoint 2013 , to control access to sites decided through security group Active Directory. Active Directory security groups are added to the ...
0
votes
1answer
42 views

SharePoint installation using one-account method

please help me with one hard task. I am not able to convince some admins and neither whole companies that installing & using SharePoint by using one (local) account method is against all best ...
0
votes
1answer
94 views

Deny users access to site home, allow access to document library

I am using SharePoint Foundation 2010 and working on managing permissions at the moment. I would like all users to have access to the document library "Shared Documents". I would like only users part ...
0
votes
1answer
50 views

Extended Web application

For my project I need to convert a Classic mode Authentication WebApplication (name Sharepoint - 8080) to Claims and add Forms Based Authentication to it. For that matter I extended the webapplication ...
0
votes
1answer
72 views

Creating a column that can only be modified by a group of people

I am creating a simple list (imagine a request for instance) in Sharepoint. This list can be modified by the user, but the field "Status" (Approved, rejected, waiting, -And any status I could imagine) ...
0
votes
0answers
19 views

Blocking the standard SQL Server ports and installing share point 2013 for Internet sites is good idea?

We have plan to deploy our organization internet portal , -our all sharepoint 2013 and SQL SERVER s are in DMZ zone for sql server security i am following Configure SQL Server security for ...
0
votes
0answers
412 views

Encrypting files and documents in Sharepoint 2013

I want to host confidential data on Sharepoint 2013 and would like to encrypt these data on a file level. There is already a Transparent Data Encryption (TDE) feature available for Sharepoint but it ...
0
votes
0answers
41 views

Filter on Views don't work after update 2956175 is applied on SP2013 env

We have applied Filter on a task list view on the Assigned To column. This was working fine. Last friday we installed the Security patches available from Microsoft published on 3/10/15. Immediately ...
0
votes
0answers
26 views

Assign Permissions to Document on Upload Workflow

I am using SPD 2010 and I am wondering if the following workflow is possible: I would like to have a workflow that when a document is uploaded by a user, the workflow assigns read permissions to that ...
0
votes
0answers
73 views

Connecting using SSRS Report SharePoint list datasource - Windows Integrated Security doesn't work

I have a report I'm building using SSRS and a SharePoint List as datasource. The report works ok only if I login with my credentials before viewing the report. My credentials do not pass automatically ...
0
votes
0answers
59 views

get error when adding a user to a group site permissions - SharePoint 2010 on premises

I need some help here . Not sure if anyone as gone through this before. But when i try to add user to a group or to anything in sharepoint via site permissions i get an error and a coreelation id. I ...
0
votes
0answers
952 views

Share a folder (break inheritance), access denied

I have a problem in Sharepoint 2013 which is reproducible. Create a document library on any site. Create a folder in this library. Break inheritance on this folder and add a user that doesn't have ...
0
votes
0answers
234 views

IE default security settings block any App scripts from running

I wrote a Sharepoint-hosted app for use by a single company. But in order for my javascript to execute on their local intranet, which uses Microsoft Windows Server 2008, I have to instruct them to ...
0
votes
0answers
199 views

FBA Active Directory Security Groups Not Working SP 2013

So I have in active directory one security group, lets call it "Shrpt_Users". Within SharePoint I have granted this Active directory group read rights to my sub site: "Advertising". My user ...
0
votes
0answers
35 views

Create users form SharePoint

In SharePoint, can you create users directly from a teamsite? i.e the users are not local computer users or Active directory users, but they are created and managed from SharePoint. This means that ...
0
votes
0answers
73 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...
0
votes
0answers
22 views

Security level on SP13

This is the scenario: I have a SP13 in which I'm deploying a File Server, so I created one web application and inside of it one Site Collection for each department. I give Full Control access to a ...
0
votes
0answers
116 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
0
votes
0answers
126 views

Proper way to get all lists of a certain type from an entire site collection regardless of current location

I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal. I'm currently using the following, but can't ...