Security is the protection of information and property from theft.

learn more… | top users | synonyms

3
votes
2answers
3k views

Is it possible to limit the visibility of list items to not only just me (the author), but anyone from my company too?

I have a custom list on a SharePoint 2010 extranet site which users from various external companies can add items to. The list's Permission Settings page allows you to make all items visible to all ...
3
votes
1answer
816 views

Question on AD Groups and Sharepoint Groups

I have a security group inside Active Directory called 'Services'. I've added a number of users to the group. I then went into Sharepoint and added that group to the 'Contribute' sharepoint group. ...
3
votes
5answers
298 views

Is it possible to create a Blacklist in the usermanagement?

We use a Sharepoint 2010. We want to prevent the Site Administrators assign a specific role (e.g. "Domain\All Users") to a site. So is it possible to create (maybe with custom code), a blacklist for ...
3
votes
1answer
505 views

SPSecurity.CatchAccessDeniedException = false: Does Sharepoint keep this setting?

When I add SPSecurity.CatchAccessDeniedException = false; this disables the redirection to a login site. Does Sharepoint keep that setting until I set it to "true" or just as long until the object is ...
3
votes
2answers
5k views

Session time out for Windows Authentication

I have a requirement where we need to timeout the SharePoint sessions (security validation). Since I am using Windows Authentication I am not able to use session timeouts (as Windows authentication ...
3
votes
1answer
106 views

Sorry you dont have access to this page

I am currently experiencing a very unusual issue with a SharePoint 2013 on-premise. We have done performed a migration from SharePoint 2010 to SharePoint 2013 and when logged in as a user who is not a ...
3
votes
1answer
409 views

Limit number of users in a security group

I've a requirement like there should be only one user with some specific permissions on a given site. We should not allow Admin to add more than one user with those permissions, So I created a group ...
3
votes
1answer
52 views

Audit the adminstrator

we are looking into the possibility of outsouring the administration of our farm. Because of the nature of sensitive data inside some of the site collection, we want to prevent data leakage. We want ...
3
votes
2answers
3k views

How to set authentication model to allow cross-domain access?

How do I change the security settings to allow cross-domain on the same web-server? I have multiple instance or site collections on the same server but want to make sure that web-services to ...
3
votes
6answers
1k views

Security around Web Parts

I have been looking to wrap security around web parts. I already have security wrapped around documents so only the correct people see the allowed documents. The problem lies when a user does not ...
3
votes
2answers
533 views

Custom User Control and FIPS Encryption Issues

I have created several custom user controls that I added to the Redering templates of some forms in a custom solution for WSS 3. Most of these templates have codebehind and they all are correctly ...
3
votes
1answer
617 views

SSL and Forms Based Authentication in WSS 3.0

I have a FBA application and we would like to use SSL with it. By default, does setting SSL in IIS use SSL for the entire site, or just the login? We think we'd like to use SSL for the entire visit ...
3
votes
2answers
2k views

Running declarative workflows under system account

I have an InfoPath form that starts a workflow (on item created). The business requirement is that after submission form must be read-only (no changes to the initial request can be made). However ...
3
votes
2answers
513 views

SharePoint won’t report active directory domain user permissions inherited from active directory domain security groups nested in SharePoint groups?

For instance: ads\mdepnorm aka MDEP TSST Norman Testing is in SP-CONTRIBUTORS ADS security group: . The sp-contributors ADS group is in SharePoint group Intranet Members: . It follows that if I ...
3
votes
1answer
259 views

How to make DIV tags accessible based on SharePoint role?

We have 3 DIV tags in master page (so, available to all pages on site). DIV 1: Employee DIV 2: Manager DIV 3: HR There are 3 groups in SharePoint:- Employee, Manager and HR. We want to make the ...
3
votes
2answers
4k views

Sign in as a different user access denied

Clicking the "sign in as a different user" link from the system menu in SP 2010 yields an access denied error. URL is: \_layouts\closeConnection.aspx?loginasanotheruser=true any ideas?
3
votes
0answers
54 views

How to set HTML field security using CSOM

Is there a way to set the HTML field security using CSOM? I already found a way to use PowerShell Scripts but i wondering if there is also a way to use CSOM. PowerShell: ...
3
votes
1answer
101 views

Security Error while doing REST update on the SP list

I am trying to make update with the usage of REST but I got an error: -2130575251, Microsoft.SharePoint.SPException. The security validation for this page is invalid and might be corrupted. ...
3
votes
2answers
95 views

Item Level Security Question

Good Afternoon, Seeking advice for setting security on a custom SP2013 list. All users need to be able to create a new item in the list. Users should not see items created by others. So far, I set ...
3
votes
1answer
570 views

What does “Security validation expires” do?

We have mixed authentication on our SharePoint 2013 site collection. I need to have FBA users automatically logged out after 30 minutes of inactivity, but they don't have to necessarily be redirected ...
3
votes
0answers
490 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
3
votes
1answer
4k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
3
votes
1answer
385 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
2
votes
1answer
9k views

jQuery SP.JS objects to test if current SharePoint user has full control / owner rigths?

As an example, the below jQuery displays current SharePoint user title. Excellent! :) Is it possible to use the sp.js objects to test If the current user has Full Control on the current page or ...
2
votes
2answers
2k views

How effective is locking down _vti_bin

I've come across a roadblock where the maintainer of the Sharepoint installation has restricted access to the _vti_bin folder (i.e. denied for all users). I am using SPservices to access the ...
2
votes
4answers
1k views

SharePoint Groups vs AD groups - further examples

From this post - http://www.sharepointoverflow.com/questions/1781/what-are-the-best-practices-for-using-sharepoint-groups-with-ad-security-groups It was mentioned by Mr Samuel Yates that there are ...
2
votes
2answers
423 views

SID and other fields added to user information list?

According to stuff I am reading on the web, when an AD user gets added to SharePoint site the following information will get copied from AD to the user information list: Display name Login name ...
2
votes
3answers
1k views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
2
votes
1answer
518 views

SharePoint 2010 Adding Users to Group “Access Denied”

When trying to add users to a group in a particular web application, users are receiving "Access Denied", even when they should have permission to do so. While investigating, I found that am able to ...
2
votes
2answers
2k views

How to check username/accountname under which the code runs?

We want piece of code which we can paste in the code behind and get the username under which code runs for:- (usually .NET code runs under account of application pool) Timer job. Event receiver. ...
2
votes
2answers
1k views

How do I fetch the data from list present in root web of the root site collection?

We need to populate some data on an application page. The application page is present in the layouts folder and hence is accessible via the respective site URL. There are multiple site collections. ...
2
votes
2answers
1k views

Under what permissions/priviledge does the runwithelevatedprivileges code run?

SPSecurity.RunWithElevatedPrivileges Method Executes the specified method with Full Control rights even if the user does not otherwise have Full Control. 1) But which under which account does this ...
2
votes
1answer
628 views

Accessing data from another web application throws an SQLInvalidException

The scenario is: A MySiteHost site collection (example name: MY SITE). Web application's application pool account is spmysite. A TeamSite site collection (example name: TEAM SITE). Web application's ...
2
votes
1answer
3k views

EnsureUser throws The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your operation again

I have this code: The EnsureUser Line is throwing me that exception, any idea? The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your ...
2
votes
2answers
495 views

Column Level Security Products

I am looking for recommendations on products that handle column level security. What is the best product out there? Any input will be greatly appreciated. Thanks!
2
votes
4answers
6k views

Are there any free security audit tool for SharePoint?

Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
2
votes
1answer
179 views

How to get (admin) access to a SP2010 Site

Someone managed to delete all the user permissions from a SP2010 (sub)Site, including their own (this person was the only site admin). How do you give (the site owner or an administrator account) ...
2
votes
5answers
3k views

Allow users to view items in Document Library, but not open the files

I have the requirement to allow users to view the content of a document library, including browsing through folders, but not actually open the individual files. There doesn't appear to be a ...
2
votes
1answer
651 views

In what Security Zone should SharePoint Online (Office 365) be added?

I was wondering in what Security Zone SharePoint Online (Office 365) should be added? I'm not sure if the Office 365 site(s) belong in the security zone Trusted Sites Zone or in Local Intranet Zone. ...
2
votes
2answers
415 views

How to manage security for on-prem provider hosted apps that are published to SharePoint Online?

I have a provider hosted app where the web site is running locally (not in azure) and the SharePoint app will be published to SharePoint online. (so user connects to SharePoint online site, clicks on ...
2
votes
1answer
137 views

RoleAssigments are being assigned by default to all new pages

I am pretty new to SharePoint, so please let me know if there is some more info or clarification required. I am creating a webapplication with certain SP groups, libraries and pages in that order by ...
2
votes
1answer
178 views

Can I use UAG to isolate my customers' portals on our extranet?

It sounds like the best practice for isolating different customers on an extranet is to use separate site collections for each customer (as is recommended in every answer to this question). If I have ...
2
votes
5answers
5k views

Limit users permission in their own my site

we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
2
votes
1answer
697 views

What is neccesary to write to filesystem from a Web Part?

How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages. The SP2010 app pool is running ...
2
votes
1answer
345 views

what need to be done when we change the manage account password from the Active directory

We have changed the passwords for the SP manage accounts inside our active directory. So I login to the SP server, then i changed the application pool identify passwords accordingly. Then I went to ...
2
votes
1answer
423 views

Total number of unique permissions per list

The http://technet.microsoft.com/en-us/library/cc262787.aspx specifies the total number of unique security scopes to 50.000/list, but recommended is 5.000/list. In a list, is it possible to find out ...
2
votes
1answer
2k views

Security For Custom Application Pages

When managing security for any control on a page we use SPSecurityTrimmedControl. But what to do when defining permissions for a custom application page? How do we restrict unauthorized people to ...
2
votes
1answer
741 views

Make all sharepoint specific cookies non-persistent?

Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
2
votes
2answers
87 views

Should I patch my intranet SharePoint?

SharePoint patching is a hassle and takes a lot of time to test and deploy, My SharePoint is an intranet site (within my organization's premises). Some fellow IT admins advised me to patch only ...
2
votes
1answer
146 views

Extending SharePoint groups metadata?

In an application I'm building, I have to create and manage groups based on business rules. Each group must have properties like managers (yes, several managers) and members, with some other ...