Security is the protection of information and property from theft.
1
vote
1answer
168 views
Authentication - multiple web domains
We use claims based authentication and have one application running, say www.abc.com
This application authenticates against AD via claimns provider.
We would like to deploy another web site: ...
0
votes
3answers
2k views
removing NT AUTHORITY\authenticated users vs all authenticated users and adding domain group instead
I have a root site collection and under the "Style Resources Readers group" i have the
NT AUTHORITY\authenticated and the all authenticated users .
Are these the same groups but with different ...
0
votes
1answer
234 views
SharePoint 2007: Farm administrator process
I have run into an interesting issue. We added a new user as a Farm Admin on the SharePoint 2007 env. The next day the user's account was disabled by IT as it was flagged by monitoring as the SPS ...
1
vote
2answers
175 views
How to remove same session value for different sessions?
I received an error from the Security testing team as follows:
It was observed that same session value is used for different sessions. After logout, session value should be cleared and the user ...
1
vote
1answer
428 views
Dissappearing SharePoint Groups
SharePoint groups started to disappear- totally randomly, within a single site collection. I am pretty sure they are not deleted because we have few site collection admins with knowledge.
like this:
...
0
votes
0answers
23 views
How do you adjust update an obscurity-based solution to SharePoint 2010?
Has anyone played with how to maintain an obscurity-based solution in SharePoint 2010? Or is this simply something that one needs to approach differently?
In SharePoint 2007, you can use a ...
0
votes
1answer
72 views
sharepoint 2010: revoke rights to see “users and permissions”
I have a sharepoint site and i want few users not to see "Users and Permissions" in 'site settings'. It should not disturb anything else.
Please help me.
0
votes
1answer
49 views
SharePoint 2010: Site security
I have Site collection (http://myapp/sites/sitcol) and i have two site in that site collections i.e root site (http://myapp/sites/sitcol/) and site2 (http://myapp/sites/sitcol/site2).
i have two ...
2
votes
1answer
182 views
RunWithElevatedPrivileges doesn't work in Webpart Constructor
With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
1
vote
1answer
268 views
Add solution from within event receiver - how to sort out “access denied” errors?
I'm handling the WebProvisioned event in order to add and deploy a solution that's relevant to the site being created. The solution is being created dynamically based on parameters of the site but for ...
1
vote
2answers
1k views
PowerShell to Remove Site User Permission
I am looking for some help removing a User Permission from a site using PowerShell.
0
votes
1answer
72 views
Single files permission error (cannot modify/delete)
When I try to modify or delete a file on a subsite I get the "This control is currently disabled" error on the ribbon, and "this item is no longer available" if I try to click on the dropdown-triangle ...
0
votes
0answers
178 views
Authenticating to sharepoint with kerberos from a java HttpClient
I have a linux\java6 client that will authenticate to sharepoint2010 with NTLM and then send HTTP REST web services using Apache Commons HttpClient.
I can do this with NTLM , but I want to use the ...
0
votes
0answers
98 views
sharepoint client object model for silverlight security error
I tried to get data from sharepoint site by client object model. Everything worked fine with .NET object model, but as for silverlight with seperate page (not hosted in sharepoint silverlight web ...
1
vote
4answers
703 views
Access denied - Let me in!
I'm a farm admin
I'm a site collection admin
I'm a member of <site> Owners
Access denied logging in (Windows)
What else could it be?
FYI, in system.web
<authentication mode="Windows" ...
0
votes
2answers
238 views
How to make dropdown link only visible to a certain group of users?
So we have a Management Meeting every two weeks and inside there is confidential information. Basically we want to make it so that link for this site/page is not even visible except to users within a ...
1
vote
1answer
554 views
How to Set Forms Authentication Timeout?
I have a public facing SP2010 site that uses forms authentication (default ASP.NET membership provider).
I noticed that The user stays logged in even after hours of inactivity.
We need the user to be ...
2
votes
1answer
164 views
SPSecurity.CatchAccessDeniedException = false: Does Sharepoint keep this setting?
When I add SPSecurity.CatchAccessDeniedException = false; this disables the redirection to a login site.
Does Sharepoint keep that setting until I set it to "true" or just as long until the object is ...
2
votes
0answers
221 views
Getting item level security on SharePoint online through standard web services
SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
0
votes
1answer
174 views
Security Permissions broke while restoring the site on a new farm
I got a problem while restoring SP2010 sub-site from our old SP2010 farm to new farm through a full backup. The subsite on old farm had unique permissions. As well as the lists inside the sub-site ...
0
votes
0answers
34 views
Way to use AJAX for reading/writing to list in context of Site Definition?
I'm deploying a subsite to multiple SharePoint site collections which has a voting aspect based on Lists.
I'm trying to keep vote fraud to a minimum by attaching identity to a vote.
I can use ...
2
votes
1answer
82 views
SSRS 2008 and SharePoint integrated mode - security flaw?
Here is my scenario: I've got SSRS 2008 R2 running in integrated mode with SharePoint 2010.
Everything works as expected in that I can create data sources, models (either through studio or via the ...
5
votes
2answers
290 views
Unique Permission Issue
This appears to be by design. I have a user who used unique permissions on a subsite and then used unique permissions on a list in the subsite. They then decided to have the subsite inherit ...
0
votes
1answer
213 views
Event Receivers on Add/Remove Users
I need some design ideas for a requirement to audit when uses are added/removed from an object. I need to collect the user doing the add/remove, date time, and reason for adding. I need to do this to ...
0
votes
2answers
402 views
All users in multi tenant environment
I have a problem with authentication in a multi tenant environment. I have a couple of seperate customers which all have their own SharePoint environment within our hosted environment. In the AD, I ...
0
votes
1answer
68 views
Security involved with running a batch file to create Document Libraries
I was wondering what kind of permission levels should a batch have to execute procedures that create programmatically Document Libraries on SharePoint 2010.
Has someone done that?
1
vote
3answers
1k views
Sharepoint 2010 web application zones and AAM configuration
Is it possible in Sharepoint 2010 to achieve the following goal:
On single Web Application add two urls (through AAM), one is usual http://site.com and another is SSL-enabled https://my.site.com and ...
0
votes
1answer
146 views
Redirecting between zones in MOSS 2007
I have Two zones(Intranet and Internet) for a MOSS Team site.I want something like this
When a Intranet(Local AD User) user try to visit Internet zone, he/she should be redirected to the Intranet ...
0
votes
0answers
455 views
Programmatically add multiple users to various groups based on information in a list
Due to security restrictions, my organization has a very complex group structure granting fine-grained permissions. We are trying to build a portal that allows for an approval system for group ...
2
votes
4answers
1k views
Limit users permission in their own my site
we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
1
vote
2answers
481 views
Allow a specific file type to be rendered in iFrame
We've been looking at enabling the Permissive File Handling in Central Admin of our SharePoint 2010 on an intranet site collection. However, we're wondering if we can allow specific file types to be ...
0
votes
2answers
284 views
Is an UpdatePanel a bad decision?
After talking to a few people, and asking around here, I feel like the only way to securely do calls asynchronously is with an updatepanel.
(Context: Creating an Upvote/Downvote system on SharePoint ...
2
votes
1answer
382 views
Sharepoint manage trust/add certificate
Hi I try to add a certificate under "central administration>security>manage trust" but I alwas get following error.
The Root Certificate that was just selected is invalid. This may be
...
0
votes
0answers
603 views
Why does a workflow cancel with “access denied” for all but users with Full Control accesse?
I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
0
votes
1answer
77 views
Adding/Updating to a SharePoint List with AJAX securely?
I'm creating a Site Definition that will have a Stack Overflow like Q/A system.
I'm hung up on the upvote/downvote system.
I see a number of ways to do this, but what I think works best is to have ...
0
votes
1answer
124 views
Site Permissions AD Query
When assigning permissions to a site in Sharepoint 2010, is it possible instead of specifically adding a group or a user, to create an LDAP query or something simular.
For example I have a group ...
2
votes
2answers
74 views
Should I patch my intranet SharePoint?
SharePoint patching is a hassle and takes a lot of time to test and deploy,
My SharePoint is an intranet site (within my organization's premises).
Some fellow IT admins advised me to patch only ...
7
votes
1answer
263 views
How does EU Cookie law affects SharePoint Sites?
The Euorpean Union has forced a new cookie law to protect privacy of a user. The full documentation is at
Information Commissioner’s Office guidance
According to an extract from the above document,
...
8
votes
2answers
1k views
Java to Sharepoint interface, with claims based authentication
I have a sharepoint server with a claims-based authentication (ADFS server).
I have a Java app that needs to push data to a sharepoint list, preferably over the REST API, and with the additional ...
2
votes
1answer
88 views
Extending SharePoint groups metadata?
In an application I'm building, I have to create and manage groups based on business rules. Each group must have properties like managers (yes, several managers) and members, with some other ...
7
votes
3answers
2k views
Penetration testing tool for SharePoint
Does anybody know any good penetration testing tools for SharePoint?
0
votes
1answer
251 views
“404 FILE NOT FOUND” on my username entries
In Sharepoint 2010 Central Administration --> Security --> Manage the farm admii
nistrator group (Central Administration : Site Settings : People and Groups - Farm Administrators), when I click on my ...
2
votes
3answers
1k views
How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)
Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
1
vote
1answer
983 views
What are the relationship between administrators groups of domain, dev computer and of Sharepoint services?
I know-know I can search and read but anyway I would need to ask in order to escape possible typos, personal misunderstandings and to better remember.
I develop on a machine with installed ...
1
vote
1answer
82 views
Cannot read site collection details with some accounts
In my SharePoint environment, I have a few seperate web applications with some different admin users. Now a new user I created is added as local admin (needed for Powershell remoting) and farm admin. ...
5
votes
5answers
777 views
How to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges
Is there a way to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges?
class Foo
{
public static void Bar()
{
if (CODE_RUNS_ELEVATED)
{
Debug.WriteLine("You ...
0
votes
1answer
78 views
Right Management Sharepoint
I have a sharepoint list. Users should be able to create new items and change some attributes. I gave full access for the users on the list items. But now I think there is a security gap:
what ...
0
votes
2answers
257 views
LINQ to SharePoint and SPUserToken
When creating a new Linq to SharePoint context, normally we don't pass a site object but we provide a request url.
So what should I do if I want to execute Linq queries under a different user ...
9
votes
3answers
1k views
Best way to Impersonate in SharePoint
So far, I am aware of below 3 ways of performing impersonation in a SharePoint web part or page :
Using Win32 API
[DllImport("advapi32.dll", SetLastError=true)]
public static extern bool ...
0
votes
0answers
180 views
Windows Authentication inside custom WebPart
I have created a custom web part that let's the user sign in using their windows accounts. However, the I get Object Not Set to the Reference error when I set the SetPrincipalAndWriteSessionToken. ...
