Security is the protection of information and property from theft.
2
votes
2answers
75 views
Should I patch my intranet SharePoint?
SharePoint patching is a hassle and takes a lot of time to test and deploy,
My SharePoint is an intranet site (within my organization's premises).
Some fellow IT admins advised me to patch only ...
2
votes
1answer
95 views
Extending SharePoint groups metadata?
In an application I'm building, I have to create and manage groups based on business rules. Each group must have properties like managers (yes, several managers) and members, with some other ...
2
votes
1answer
320 views
What is neccesary to write to filesystem from a Web Part?
How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages.
The SP2010 app pool is running ...
2
votes
3answers
763 views
How do I find out what a group has permission to?
I'm cleaning up a farm that has loads of junk groups on it. Is there an easy way to tell if any of these groups have been assigned access to anything? The intention is to delete groups that have ...
2
votes
2answers
727 views
Access Denied Error while updating the web.config
I am using a third party control for my application in SharePoint 2010 and I need to add entries in the web.config of the web application. Programmatically I have added the entries in the code and ...
2
votes
2answers
1k views
Running declarative workflows under system account
I have an InfoPath form that starts a workflow (on item created). The business requirement is that after submission form must be read-only (no changes to the initial request can be made). However ...
2
votes
2answers
402 views
Prevent Access to Custom Web Application Pages by Non-Admin Users
I have a custom web application that integrates with a SharePoint (MOSS 2007) solution. I would like to add role-based access to pages in this custom web application, with only users in a specified ...
2
votes
3answers
1k views
How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)
Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
2
votes
3answers
2k views
Field-Level Security
Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
2
votes
1answer
386 views
Uploading files using object model
I'm experiencing some problems adding documents to a library using the object model.
I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
2
votes
3answers
189 views
Deny user access from SharePoint Native but allow it from custom application
How can i restrict a user from entering SharePoint - unless he is using my custom application?
For example, a user tries to open http://Mysite , he gets an access denied error.
But as the same time, ...
2
votes
1answer
314 views
Security Exception - Trying to load MySite Blog
When I try to run this async query it fails:
private void SomeFunction()
{
Thread thread = new Thread(GetBlogInfo);
thread.Start();
}
private void GetBlogInfo()
{
...
2
votes
1answer
2k views
How to remove a permission to a SPPrincipal on a Item (programmatically)
I'm trying to work with privileges on elements of a list. I want the item to mantain the same privileges for all SPPrincipal I don't modify.
This is the code
public static void ...
2
votes
1answer
378 views
Change List Item Permission via Web Services?
Using web services, is there a way to assign a list item different security than the rest of the list?
Lets say I have 3 rows in the list and 2 different groups.
1. A ; Group A & B can see
...
2
votes
1answer
71 views
Silverlight application privileges
I have a silverlight application which uses the client object model to access the sharepoint server.
When i run the app "out-of-browser" with elevated trust everything works great, but when i try it ...
2
votes
1answer
315 views
User not showing on People page although listed when using Powershell
I'm using SharePoint 2010 (14.0.4763.1000) and have a user that is not showing on the People page (_layouts/people.aspx?MembershipGroupId=3). MembershipGroupId=3 is the Owner's Group.
When using ...
2
votes
1answer
185 views
Which accounts should be managed accounts?
Three questions on a theme...
Which accounts should be managed accounts?
Or perhaps to put it another way, which services / things are best to have as managed accounts?
Or perhaps the opposite ...
2
votes
2answers
1k views
How to create a “datasheet-like” list view to update a checkbox in multiple rows?
I am using draft item security on a forms library to only allow the creator of a form and a user with "edit items" permissions to view a form in the library.
I would like to provide the user with ...
2
votes
4answers
673 views
What is a SharePoint Server Side File Hander?
The definition of the 'View Only' permissions level is as follows:
Members of this group can view pages,
list items, and documents. If the
document has a server-side file
handler available, ...
2
votes
1answer
58 views
NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users
I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model.
When I call a webservice method that operates on a SharePoint Web Application ...
2
votes
1answer
165 views
ValidateFormDigest - when exactly does it need to be called?
Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest?
Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...
2
votes
2answers
125 views
Sharepont 2013 - NTLM Logout
Our SharePoint 2013 site will not log users out unless the browser is completely closed. We are using NTLM authentication but the site is hosted, so it is external accessible. We are afraid users ...
2
votes
1answer
54 views
How to add security to a page using powershell
I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
2
votes
0answers
185 views
Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given
Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying:
This action couldn't be performed because Office doesn't recognize the ...
2
votes
0answers
68 views
SP 2010: Detect authentication mode
SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
2
votes
0answers
223 views
Getting item level security on SharePoint online through standard web services
SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
2
votes
1answer
87 views
SSRS 2008 and SharePoint integrated mode - security flaw?
Here is my scenario: I've got SSRS 2008 R2 running in integrated mode with SharePoint 2010.
Everything works as expected in that I can create data sources, models (either through studio or via the ...
2
votes
1answer
342 views
Make all sharepoint specific cookies non-persistent?
Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
2
votes
1answer
183 views
RunWithElevatedPrivileges doesn't work in Webpart Constructor
With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
2
votes
0answers
620 views
Page History/Page Permissions exceptions (BreakInheritance(false, false)) [closed]
I'm experiencing a serious problem (SharePoint 2010) I want to share with you. Steps to reproduce it:
Create a Web application.
Create a site collection inside the Web application previously ...
2
votes
5answers
2k views
SharePoint 2010: Disable / Hide references to SPSDisco.aspx
I asked this question originally on StackOverflow. I was referred here, so I'll repost:
After upgrading some of our external websites running on SharePoint 2007 to 2010, we ran a link checker to ...
1
vote
4answers
531 views
Quick Launch View - Problem
I have designed the quick launch for a SharePoint 2010 site in master page, Now for some pages I do not want the quick launch to show up, (Or better say some SharePoint groups).
So I added a web ...
1
vote
2answers
514 views
Allow a specific file type to be rendered in iFrame
We've been looking at enabling the Permissive File Handling in Central Admin of our SharePoint 2010 on an intranet site collection. However, we're wondering if we can allow specific file types to be ...
1
vote
2answers
404 views
Does breaking library/list security inheritance also break it's items inheritance?
We need to break inheritance on a document library. Some users of a site should have read only to document library 1 while some users should have contributor rights to document library 2 (both within ...
1
vote
4answers
250 views
Anyone know of a good technical arch diagram or white paper article for SharePoint security?
Anyone know of a good technical arch diagram or white paper article focused SharePoint security?
Mod's, I know this isn't a coding question so feel free to delete it if it violates the rules and I ...
1
vote
1answer
250 views
Why does the central admin requires to run in IE with elevated privileges?
As described here : http://blogs.msdn.com/b/jorman/archive/2010/07/10/missing-links-or-access-denied-in-central-admin-sharepoint-2010.aspx, I have to run with an elevated IE to get all actions.
What ...
1
vote
2answers
27 views
SID and other fields added to user information list?
According to stuff I am reading on the web, when an AD user gets added to SharePoint site the following information will get copied from AD to the user information list:
Display name
Login name
...
1
vote
1answer
288 views
Get list items even if user does not have access to those items
Is there a way to get items from a list even if the current user does not actually have acces to them? SPSecurity.RunWithElevatedPrivileges does not seem to work!
I have a special case in which I ...
1
vote
3answers
512 views
Encrypt SSN column in a list
I need to encrypt social security column in a list. What are my options?
ps: Did not find Encryption in the Tags.
Actually, looking for something like this (Column Level Security, but non ...
1
vote
3answers
2k views
Are there any free security audit tool for SP?
Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
1
vote
2answers
993 views
View PDFs in web browser
When I go to view a PDF on the web, say a 1040 form at the IRS, when I open it it opens in my browser. When I open a PDF file from my sharepoint 2010 instance, however, it prompts me to download the ...
1
vote
1answer
1k views
Reason for FormDigestSettings.Enabled?
I am using SharePoint Server 2007 Enterprise with Windows Server 2008 Enterprise. I have deployed a publishing portal. I am developing a ASP.Net web application using VSTS 2008 + C# + .Net 3.5 + ...
1
vote
3answers
6k views
People Picker and fltering by certain AD Groups
I have a scenario where a client wants to filter in the People Picker what AD Groups are available to choose from. For instance, when selecting what AD User/AD Group can be added to an Alert on a ...
1
vote
1answer
27 views
Site Collection Administrators permissions level?
I tried to answer this one via Google but the answers seem quite conflicting. I was wondering if anybody knows this answer definitively, or can reference any Microsoft documentation (I couldn't find ...
1
vote
2answers
109 views
Best Practices to make my internet facing portal secure
Ok,
so I finished developing my internet site.
It uses a federation provider to authenticate public user.
Now what I'm concern of, is the site security.
I see that any logged in user can see the ...
1
vote
1answer
871 views
“DWORD (32-bit) Value” or “”Qword (32-bit) Value" - which one should I configure in Windows 64-bit registry?
"DisableLoopbackCheck & SharePoint: What every admin and developer should know" advises to disable ("infamous") "loopback check" completely on dev machine by following
"You receive error 401.1 ...
1
vote
3answers
2k views
Sharepoint 2010 Item level Permission to a Document Library is Our approach right?
We are planing to apply Item level Permission on document library and want share point experts advise...are we going right way or we will fall in performance issue or others..
What We Have :
1- We ...
1
vote
2answers
761 views
How to force the Word Automation Services Timer to run?
I need to run the Word Automation Services immediately after adding a job. My code is running in a workflow.
Here is what I got so far :
SPSecurity.RunWithElevatedPrivileges(delegate()
{
using ...
1
vote
1answer
90 views
Design Advice required on SharePoint 2010
I am new to SharePoint
I've a requirement to build Sharepoint 2010 Portal with below specs.
There would be 3 user group
A. Marketing
B. Sales user
C. Admin
Marketing group will upload docs and ...
1
vote
1answer
114 views
Can I give a Super User the ability to impersonate someone else?
We currently have a situation where we need the ability to fully impersonate a login on a SharePoint Web Application. Effectively any "SuperUser" needs the ability to, without a password, proxy login ...
