Security is the protection of information and property from theft.

learn more… | top users | synonyms

3
votes
2answers
527 views

Custom User Control and FIPS Encryption Issues

I have created several custom user controls that I added to the Redering templates of some forms in a custom solution for WSS 3. Most of these templates have codebehind and they all are correctly ...
3
votes
1answer
613 views

SSL and Forms Based Authentication in WSS 3.0

I have a FBA application and we would like to use SSL with it. By default, does setting SSL in IIS use SSL for the entire site, or just the login? We think we'd like to use SSL for the entire visit ...
3
votes
2answers
2k views

Running declarative workflows under system account

I have an InfoPath form that starts a workflow (on item created). The business requirement is that after submission form must be read-only (no changes to the initial request can be made). However ...
3
votes
2answers
4k views

Session time out for Windows Authentication

I have a requirement where we need to timeout the SharePoint sessions (security validation). Since I am using Windows Authentication I am not able to use session timeouts (as Windows authentication ...
3
votes
1answer
161 views

How to make DIV tags accessible based on SharePoint role?

We have 3 DIV tags in master page (so, available to all pages on site). DIV 1: Employee DIV 2: Manager DIV 3: HR There are 3 groups in SharePoint:- Employee, Manager and HR. We want to make the ...
3
votes
2answers
593 views

Access Denied from Migrated SP2010 -> 2013 Web App

I've migrated a web application's content database from SP2010 to SP2013. After the migration was complete, I am completely locked out of the web application. Navigating to the root site collection ...
3
votes
2answers
3k views

Sign in as a different user access denied

Clicking the "sign in as a different user" link from the system menu in SP 2010 yields an access denied error. URL is: \_layouts\closeConnection.aspx?loginasanotheruser=true any ideas?
3
votes
1answer
55 views

What does “Security validation expires” do?

We have mixed authentication on our SharePoint 2013 site collection. I need to have FBA users automatically logged out after 30 minutes of inactivity, but they don't have to necessarily be redirected ...
3
votes
0answers
425 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
3
votes
1answer
361 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
3
votes
2answers
2k views

Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given

Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying: This action couldn't be performed because Office doesn't recognize the ...
2
votes
2answers
2k views

How effective is locking down _vti_bin

I've come across a roadblock where the maintainer of the Sharepoint installation has restricted access to the _vti_bin folder (i.e. denied for all users). I am using SPservices to access the ...
2
votes
4answers
1k views

SharePoint Groups vs AD groups - further examples

From this post - http://www.sharepointoverflow.com/questions/1781/what-are-the-best-practices-for-using-sharepoint-groups-with-ad-security-groups It was mentioned by Mr Samuel Yates that there are ...
2
votes
2answers
490 views

Are “Security only” crawls kicked off automatically?

I know that if a user is added to a SharePoint group, a crawl needs to run before the ACLs are updated to reflect the new user's permissions. The question that my team is debating is whether or not ...
2
votes
3answers
1k views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
2
votes
2answers
1k views

How to check username/accountname under which the code runs?

We want piece of code which we can paste in the code behind and get the username under which code runs for:- (usually .NET code runs under account of application pool) Timer job. Event receiver. ...
2
votes
2answers
614 views

How do I fetch the data from list present in root web of the root site collection?

We need to populate some data on an application page. The application page is present in the layouts folder and hence is accessible via the respective site URL. There are multiple site collections. ...
2
votes
2answers
599 views

Under what permissions/priviledge does the runwithelevatedprivileges code run?

SPSecurity.RunWithElevatedPrivileges Method Executes the specified method with Full Control rights even if the user does not otherwise have Full Control. 1) But which under which account does this ...
2
votes
1answer
432 views

Accessing data from another web application throws an SQLInvalidException

The scenario is: A MySiteHost site collection (example name: MY SITE). Web application's application pool account is spmysite. A TeamSite site collection (example name: TEAM SITE). Web application's ...
2
votes
2answers
492 views

Column Level Security Products

I am looking for recommendations on products that handle column level security. What is the best product out there? Any input will be greatly appreciated. Thanks!
2
votes
4answers
5k views

Are there any free security audit tool for SharePoint?

Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
2
votes
1answer
178 views

How to get (admin) access to a SP2010 Site

Someone managed to delete all the user permissions from a SP2010 (sub)Site, including their own (this person was the only site admin). How do you give (the site owner or an administrator account) ...
2
votes
5answers
3k views

Allow users to view items in Document Library, but not open the files

I have the requirement to allow users to view the content of a document library, including browsing through folders, but not actually open the individual files. There doesn't appear to be a ...
2
votes
1answer
132 views

RoleAssigments are being assigned by default to all new pages

I am pretty new to SharePoint, so please let me know if there is some more info or clarification required. I am creating a webapplication with certain SP groups, libraries and pages in that order by ...
2
votes
1answer
3k views

EnsureUser throws The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your operation again

I have this code: The EnsureUser Line is throwing me that exception, any idea? The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your ...
2
votes
1answer
178 views

Can I use UAG to isolate my customers' portals on our extranet?

It sounds like the best practice for isolating different customers on an extranet is to use separate site collections for each customer (as is recommended in every answer to this question). If I have ...
2
votes
5answers
4k views

Limit users permission in their own my site

we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
2
votes
1answer
658 views

What is neccesary to write to filesystem from a Web Part?

How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages. The SP2010 app pool is running ...
2
votes
1answer
129 views

Total number of unique permissions per list

The http://technet.microsoft.com/en-us/library/cc262787.aspx specifies the total number of unique security scopes to 50.000/list, but recommended is 5.000/list. In a list, is it possible to find out ...
2
votes
1answer
218 views

Limit number of users in a security group

I've a requirement like there should be only one user with some specific permissions on a given site. We should not allow Admin to add more than one user with those permissions, So I created a group ...
2
votes
2answers
2k views

How to set authentication model to allow cross-domain access?

How do I change the security settings to allow cross-domain on the same web-server? I have multiple instance or site collections on the same server but want to make sure that web-services to ...
2
votes
1answer
1k views

Security For Custom Application Pages

When managing security for any control on a page we use SPSecurityTrimmedControl. But what to do when defining permissions for a custom application page? How do we restrict unauthorized people to ...
2
votes
1answer
687 views

Make all sharepoint specific cookies non-persistent?

Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
2
votes
2answers
84 views

Should I patch my intranet SharePoint?

SharePoint patching is a hassle and takes a lot of time to test and deploy, My SharePoint is an intranet site (within my organization's premises). Some fellow IT admins advised me to patch only ...
2
votes
1answer
138 views

Extending SharePoint groups metadata?

In an application I'm building, I have to create and manage groups based on business rules. Each group must have properties like managers (yes, several managers) and members, with some other ...
2
votes
4answers
5k views

How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)

Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
2
votes
1answer
2k views

What are the relationship between administrators groups of domain, dev computer and of Sharepoint services?

I know-know I can search and read but anyway I would need to ask in order to escape possible typos, personal misunderstandings and to better remember. I develop on a machine with installed ...
2
votes
1answer
710 views

Change List Item Permission via Web Services?

Using web services, is there a way to assign a list item different security than the rest of the list? Lets say I have 3 rows in the list and 2 different groups. 1. A ; Group A & B can see ...
2
votes
1answer
4k views

How do I export site security groups and memberships with PowerShell?

I'm looking for a PowerShell script (or tool) to export a site's groups and group memberships to a text file. These files would be used as backup for the current security configuration in case the ...
2
votes
3answers
1k views

How do I find out what a group has permission to?

I'm cleaning up a farm that has loads of junk groups on it. Is there an easy way to tell if any of these groups have been assigned access to anything? The intention is to delete groups that have ...
2
votes
2answers
1k views

Access Denied Error while updating the web.config

I am using a third party control for my application in SharePoint 2010 and I need to add entries in the web.config of the web application. Programmatically I have added the entries in the code and ...
2
votes
1answer
7k views

Target audience don't work

i turned on target audience for my list and in "Target Audience" column i have such value: ;;;;Portal Owners, Portal Members, Group1. I thought that this is enouf to prevent user to see list item, but ...
2
votes
2answers
415 views

Prevent Access to Custom Web Application Pages by Non-Admin Users

I have a custom web application that integrates with a SharePoint (MOSS 2007) solution. I would like to add role-based access to pages in this custom web application, with only users in a specified ...
2
votes
1answer
4k views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
2
votes
4answers
569 views

SharePoint user access not updating from AD Security Groups

I have a SharePoint site collection that has no direct user permissions set, we have a policy where users are added to a specific AD group to get access to different areas, your classic Role based ...
2
votes
1answer
22 views

mandatory security group

trying to solve a permission issue. We have created a custom permission level called Site Owner that removes the ability to create subsites but keeps everything else, including the ability to edit ...
2
votes
1answer
321 views

Access to Default Landing Site without Access to Everything

I have a very basic SharePoint 2010 site collection that was set up as the default Team Site template. My goal is to have domain users be able to navigate to the main landing page of the site ...
2
votes
1answer
592 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
2
votes
4answers
4k views

Field-Level Security

Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
2
votes
1answer
443 views

Uploading files using object model

I'm experiencing some problems adding documents to a library using the object model. I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...