Security is the protection of information and property from theft.

learn more… | top users | synonyms

2
votes
4answers
1k views

SharePoint Groups vs AD groups - further examples

From this post - http://www.sharepointoverflow.com/questions/1781/what-are-the-best-practices-for-using-sharepoint-groups-with-ad-security-groups It was mentioned by Mr Samuel Yates that there are ...
2
votes
2answers
2k views

How effective is locking down _vti_bin

I've come across a roadblock where the maintainer of the Sharepoint installation has restricted access to the _vti_bin folder (i.e. denied for all users). I am using SPservices to access the ...
2
votes
2answers
41 views

Under what permissions/priviledge does the runwithelevatedprivileges code run?

SPSecurity.RunWithElevatedPrivileges Method Executes the specified method with Full Control rights even if the user does not otherwise have Full Control. 1) But which under which account does this ...
2
votes
3answers
474 views

Column Level Security Products

I am looking for recommendations on products that handle column level security. What is the best product out there? Any input will be greatly appreciated. Thanks!
2
votes
3answers
3k views

Are there any free security audit tool for SP?

Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
2
votes
1answer
176 views

How to get (admin) access to a SP2010 Site

Someone managed to delete all the user permissions from a SP2010 (sub)Site, including their own (this person was the only site admin). How do you give (the site owner or an administrator account) ...
2
votes
5answers
2k views

Allow users to view items in Document Library, but not open the files

I have the requirement to allow users to view the content of a document library, including browsing through folders, but not actually open the individual files. There doesn't appear to be a ...
2
votes
2answers
64 views

How to check username/accountname under which the code runs?

We want piece of code which we can paste in the code behind and get the username under which code runs for:- (usually .NET code runs under account of application pool) Timer job. Event receiver. ...
2
votes
1answer
96 views

RoleAssigments are being assigned by default to all new pages

I am pretty new to SharePoint, so please let me know if there is some more info or clarification required. I am creating a webapplication with certain SP groups, libraries and pages in that order by ...
2
votes
2answers
1k views

How to set authentication model to allow cross-domain access?

How do I change the security settings to allow cross-domain on the same web-server? I have multiple instance or site collections on the same server but want to make sure that web-services to ...
2
votes
1answer
1k views

EnsureUser throws The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your operation again

I have this code: The EnsureUser Line is throwing me that exception, any idea? The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your ...
2
votes
1answer
171 views

Can I use UAG to isolate my customers' portals on our extranet?

It sounds like the best practice for isolating different customers on an extranet is to use separate site collections for each customer (as is recommended in every answer to this question). If I have ...
2
votes
4answers
2k views

Limit users permission in their own my site

we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
2
votes
1answer
471 views

What is neccesary to write to filesystem from a Web Part?

How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages. The SP2010 app pool is running ...
2
votes
1answer
129 views

Accessing data from another web application throws an SQLInvalidException

The scenario is: A MySiteHost site collection (example name: MY SITE). Web application's application pool account is spmysite. A TeamSite site collection (example name: TEAM SITE). Web application's ...
2
votes
5answers
124 views

Is it possible to create a Blacklist in the usermanagement?

We use a Sharepoint 2010. We want to prevent the Site Administrators assign a specific role (e.g. "Domain\All Users") to a site. So is it possible to create (maybe with custom code), a blacklist for ...
2
votes
1answer
1k views

How to Set Forms Authentication Timeout?

I have a public facing SP2010 site that uses forms authentication (default ASP.NET membership provider). I noticed that The user stays logged in even after hours of inactivity. We need the user to be ...
2
votes
2answers
79 views

Should I patch my intranet SharePoint?

SharePoint patching is a hassle and takes a lot of time to test and deploy, My SharePoint is an intranet site (within my organization's premises). Some fellow IT admins advised me to patch only ...
2
votes
1answer
119 views

Extending SharePoint groups metadata?

In an application I'm building, I have to create and manage groups based on business rules. Each group must have properties like managers (yes, several managers) and members, with some other ...
2
votes
3answers
2k views

How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)

Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
2
votes
1answer
3k views

How do I export site security groups and memberships with PowerShell?

I'm looking for a PowerShell script (or tool) to export a site's groups and group memberships to a text file. These files would be used as backup for the current security configuration in case the ...
2
votes
3answers
977 views

How do I find out what a group has permission to?

I'm cleaning up a farm that has loads of junk groups on it. Is there an easy way to tell if any of these groups have been assigned access to anything? The intention is to delete groups that have ...
2
votes
2answers
928 views

Access Denied Error while updating the web.config

I am using a third party control for my application in SharePoint 2010 and I need to add entries in the web.config of the web application. Programmatically I have added the entries in the code and ...
2
votes
2answers
412 views

Prevent Access to Custom Web Application Pages by Non-Admin Users

I have a custom web application that integrates with a SharePoint (MOSS 2007) solution. I would like to add role-based access to pages in this custom web application, with only users in a specified ...
2
votes
1answer
29 views

Limit number of users in a security group

I've a requirement like there should be only one user with some specific permissions on a given site. We should not allow Admin to add more than one user with those permissions, So I created a group ...
2
votes
1answer
21 views

mandatory security group

trying to solve a permission issue. We have created a custom permission level called Site Owner that removes the ability to create subsites but keeps everything else, including the ability to edit ...
2
votes
1answer
37 views

Audit the adminstrator

we are looking into the possibility of outsouring the administration of our farm. Because of the nature of sensitive data inside some of the site collection, we want to prevent data leakage. We want ...
2
votes
1answer
118 views

Access to Default Landing Site without Access to Everything

I have a very basic SharePoint 2010 site collection that was set up as the default Team Site template. My goal is to have domain users be able to navigate to the main landing page of the site ...
2
votes
1answer
96 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
2
votes
1answer
481 views

Make all sharepoint specific cookies non-persistent?

Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
2
votes
4answers
3k views

Field-Level Security

Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
2
votes
1answer
424 views

Uploading files using object model

I'm experiencing some problems adding documents to a library using the object model. I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
2
votes
3answers
252 views

Deny user access from SharePoint Native but allow it from custom application

How can i restrict a user from entering SharePoint - unless he is using my custom application? For example, a user tries to open http://Mysite , he gets an access denied error. But as the same time, ...
2
votes
1answer
407 views

Security Exception - Trying to load MySite Blog

When I try to run this async query it fails: private void SomeFunction() { Thread thread = new Thread(GetBlogInfo); thread.Start(); } private void GetBlogInfo() { ...
2
votes
1answer
3k views

How to remove a permission to a SPPrincipal on a Item (programmatically)

I'm trying to work with privileges on elements of a list. I want the item to mantain the same privileges for all SPPrincipal I don't modify. This is the code public static void ...
2
votes
1answer
518 views

Change List Item Permission via Web Services?

Using web services, is there a way to assign a list item different security than the rest of the list? Lets say I have 3 rows in the list and 2 different groups. 1. A ; Group A & B can see ...
2
votes
1answer
71 views

Silverlight application privileges

I have a silverlight application which uses the client object model to access the sharepoint server. When i run the app "out-of-browser" with elevated trust everything works great, but when i try it ...
2
votes
1answer
353 views

User not showing on People page although listed when using Powershell

I'm using SharePoint 2010 (14.0.4763.1000) and have a user that is not showing on the People page (_layouts/people.aspx?MembershipGroupId=3). MembershipGroupId=3 is the Owner's Group. When using ...
2
votes
1answer
200 views

Which accounts should be managed accounts?

Three questions on a theme... Which accounts should be managed accounts? Or perhaps to put it another way, which services / things are best to have as managed accounts? Or perhaps the opposite ...
2
votes
2answers
2k views

How to create a “datasheet-like” list view to update a checkbox in multiple rows?

I am using draft item security on a forms library to only allow the creator of a form and a user with "edit items" permissions to view a form in the library. I would like to provide the user with ...
2
votes
4answers
911 views

What is a SharePoint Server Side File Hander?

The definition of the 'View Only' permissions level is as follows: Members of this group can view pages, list items, and documents. If the document has a server-side file handler available, ...
2
votes
0answers
11 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
2
votes
0answers
24 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
2
votes
1answer
71 views

How to add security to a page using powershell

I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
2
votes
0answers
95 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
2
votes
0answers
293 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
2
votes
1answer
104 views

SSRS 2008 and SharePoint integrated mode - security flaw?

Here is my scenario: I've got SSRS 2008 R2 running in integrated mode with SharePoint 2010. Everything works as expected in that I can create data sources, models (either through studio or via the ...
2
votes
1answer
254 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
2
votes
0answers
752 views

Page History/Page Permissions exceptions (BreakInheritance(false, false)) [closed]

I'm experiencing a serious problem (SharePoint 2010) I want to share with you. Steps to reproduce it: Create a Web application. Create a site collection inside the Web application previously ...
2
votes
5answers
3k views

SharePoint 2010: Disable / Hide references to SPSDisco.aspx

I asked this question originally on StackOverflow. I was referred here, so I'll repost: After upgrading some of our external websites running on SharePoint 2007 to 2010, we ran a link checker to ...