Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
1answer
8 views

Grant permission on a file basis?

is there a way to grant access to individual files in a report library? So can I have a report library, and in it a folder and in the folder 3 files where only some people can access file one, and ...
0
votes
2answers
269 views

use sharepoint to allow access to external users across secure server

I am working for an organization that is using SharePoint 2010. We have to collaborate with people from different departments working at different locations using different servers. Does SharePoint ...
1
vote
1answer
33 views

What Share permissions am i forgetting?

Hi I've setup a 2013 Sharepoint site on my companies 365 org and none of my users can see the documents in the folder. The users are signed in properly and i've shared the folders with NT ...
0
votes
1answer
166 views

How can I secure _vti_pvt folders?

I am dealing with a security report from an external contractor, in which there is a finding labeled as a medium risk. It is titled IIS .cnf file leakage. This is somewhat confusing to me, since ...
0
votes
1answer
67 views

Sharepoint 2010 : XSS attacks

Recently i found out that application in sharepoint 2010 vulnerable to XSS attacks . http://tools.cisco.com/security/center/viewAlert.x?alertId=34048 The XSS attack is something like : an attacker ...
1
vote
0answers
58 views

How to redirect a user to a sharepoint online site when using custom login

I would like to have a custom login to my SharePoint Online. I can authenticate successfully by doing the below : var targetSite = new Uri("https://<site_url>"); var login = ...
0
votes
2answers
56 views

Security performance Issues

I'm kind of new in Sharepoint and I've read that you have performance issues if you set the security at the document level but this happen if you create let's say 3 folders in the library and then you ...
0
votes
1answer
16 views

Create only certain types of Apps in SharePoint 2013

Is there a way to restrict users to create only certain types of Apps in SharePoint, for example let's say that I just want to allow them just to create Document Libraries and not Lists, Calendars, ...
-1
votes
1answer
24 views

secondary administrator for manage share point farm

we have a SharePoint farm and i have one user account this user has full permissions to whole SharePoint farm servers and web applications. but i want to create another user for secondary ...
2
votes
0answers
266 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article. This method gets the ...
2
votes
1answer
2k views

Security For Custom Application Pages

When managing security for any control on a page we use SPSecurityTrimmedControl. But what to do when defining permissions for a custom application page? How do we restrict unauthorized people to ...
1
vote
0answers
18 views

Item permissions changed

I have a question because i cant explain why something happend. Suddenly the item permissions on several items are changed. An AD group is gone as a permissions group and instead i see the ...
3
votes
4answers
1k views

SharePoint user access not updating from AD Security Groups

I have a SharePoint site collection that has no direct user permissions set, we have a policy where users are added to a specific AD group to get access to different areas, your classic Role based ...
2
votes
2answers
413 views

How to manage security for on-prem provider hosted apps that are published to SharePoint Online?

I have a provider hosted app where the web site is running locally (not in azure) and the SharePoint app will be published to SharePoint online. (so user connects to SharePoint online site, clicks on ...
3
votes
1answer
568 views

What does “Security validation expires” do?

We have mixed authentication on our SharePoint 2013 site collection. I need to have FBA users automatically logged out after 30 minutes of inactivity, but they don't have to necessarily be redirected ...
0
votes
1answer
54 views

SharePoint lists and libraries are accessible without any authentication

I am new to SharePoint development, I am building an internet facing website with anonymous permissions for the pages, my current situation is that my lists are accessible without any security upon ...
0
votes
1answer
28 views

Permission levels based on terms

I'm new to SharePoint (working with SP 2013 Enterprise on-premises) and have a question. Consider we have several privacy levels stored in a termset and a SharePoint list. Privacy term is a field of ...
1
vote
2answers
13 views

Security and backup if documents in library are not synced

Is there any reason why I would not want to store all of my business documents and not sync them? Should I have any concerns about security or losing data? I don't need to have my documents synced ...
2
votes
1answer
557 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
1
vote
3answers
1k views

Programatically adding SharePoint groups to Group Quicklaunch

I'm programatically creating a new site with associated groups (Owners, Members etc) in MOSS 2007 When the site is created, and groups associated with the site, the groups don't appear in the Groups ...
2
votes
1answer
345 views

what need to be done when we change the manage account password from the Active directory

We have changed the passwords for the SP manage accounts inside our active directory. So I login to the SP server, then i changed the application pool identify passwords accordingly. Then I went to ...
0
votes
1answer
74 views

Item-level Security on SSRS report from SharePoint list

We have created an SSRS report from SharePoint 2010 list. We have item level permission in the source list, so the user can view only the items for which they have privilege. But in SSRS report it ...
0
votes
3answers
1k views

Can you detect permissions on a list via Ajax or SharePoint web services?

The context for this is the SPServices or Imtech (SP)LookupAddNew function that let you add new items to lookups without navigating to the target list. Can we avoid adding the link for users without ...
1
vote
1answer
381 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
1
vote
0answers
51 views

Allow access to enter data , but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
1
vote
3answers
9k views

People Picker and fltering by certain AD Groups

I have a scenario where a client wants to filter in the People Picker what AD Groups are available to choose from. For instance, when selecting what AD User/AD Group can be added to an Alert on a ...
2
votes
5answers
5k views

Limit users permission in their own my site

we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
1
vote
1answer
309 views

Different URLS for different auth providers, under one web application and site collection

We have a single site collection setup within a web application. The site collection has one top-level site, and the setup has one content database. The application is using Forms authentication for ...
3
votes
1answer
385 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
1
vote
0answers
40 views

SharePoint setup where admin has no access to data

We have a customer who want's to store sensitive data on SharePoint which should only be accessed from a few members of the company. This would be no problem with SharePoint group policies, but we ...
0
votes
1answer
107 views

Restrict permissions/access to list items in code

Does anyone know a way to restrict access to list items in code, even if someone has full control on a list item, deny that in code. I know there is a way for updating using event receiver, but I'm ...
1
vote
1answer
218 views

Security Exception when calling WCF Service from Sharepoint 2013 Visual webpart

Want to call WCF service from Sharepoint 2013 Visual Web Part; when using this Service from Console it works perfectly. I receive following Security Exception when using svc from webpart: Request ...
0
votes
1answer
35 views

SP2013 unknown reason for access issues

I added an AD user to group "Site Members" in a SharePoint 2013 application. Group "Site Members" has Contribute permissions at the site root, and there are no restrictive permissions listed when ...
0
votes
1answer
13 views

Security Domination

Does Lower / Weaker Security Rule over Higher security or Vice Verse? E.g. A User wants to Edit a list and has the following permissions across two groups: S1 - View Only S2 - Full Access Which ...
0
votes
0answers
1k views

Share a folder (break inheritance), access denied

I have a problem in Sharepoint 2013 which is reproducible. Create a document library on any site. Create a folder in this library. Break inheritance on this folder and add a user that doesn't have ...
1
vote
0answers
75 views

Web API / SharePoint

In an attempt to abstract the process of accessing SharePoint data, I would like to create a Web API application that can run server-side code (think, SP objects). What are some best practices for ...
0
votes
1answer
27 views

How can I block USB port access with certain permissions on Sharepoint?

Is this at all possible? I've been told to do it and do not know how. I'm using Sharepoint 2010
0
votes
1answer
102 views

Microsoft Office credential prompts

Microsoft Office applications prompt for user credentials when associated file types are loaded from SharePoint (xlsx, docx, etc). Is there any way to pass through the Windows login credentials so ...
1
vote
1answer
689 views

Unique security scope number inside library

I have seen a recommendation, that there should be no more security scopes than 5000: For most farms, we recommend that you consider lowering this limit to 5,000 unique scopes. For large lists, ...
0
votes
1answer
167 views

How do I restrict access to System Pages?

I want a user group to only be able to access our published front-end site. How can I prevent these users from accessing System pages? For example, I don't want them to be able to access ...
1
vote
1answer
61 views

Auto setting security settings of a subsite using workflow

I am wondering if it is possible at all to edit site permission settings using workflow? I work for a consulting company who takes small projects from various clients and wants to move their ...
7
votes
1answer
1k views

Is the “Keep me signed in” in SharePoint Online a security flaw?

We are considering replacing our on-premise SharePoint intranet with SharePoint Online. I won't spell out the advantages, but I can see one big disadvantage - the "Keep me signed in"-button... Our ...
0
votes
1answer
1k views

Security Exception in SharePoint 2010 when executing

My SharePoint 2010 solution comprises of 2 Features. One feature uses the Flee library to do some mathematical calculations in some code behind. The solution has a number of class libraries that I ...
1
vote
1answer
85 views

Allow others to see picture, but deny access to mysite

We are sharing parts of our SharePoint 2013 enterprise site with our customers. Security-wise this can be managed pretty well, but I have one problem. Customers do see employee photo & names (next ...
13
votes
4answers
8k views

Best way to Impersonate in SharePoint

So far, I am aware of below 3 ways of performing impersonation in a SharePoint web part or page : Using Win32 API [DllImport("advapi32.dll", SetLastError=true)] public static extern bool ...
6
votes
1answer
7k views

“The XSS Auditor refused to execute a script in…” from Chrome when using <script> tag in content editor webpart

Embedding javascript in a content editor web part triggers XSS Auditor error in Chrome when editing any webpart on the page containing the content editor web part. Steps to reproduce 1 - Use newest ...
2
votes
1answer
420 views

Total number of unique permissions per list

The http://technet.microsoft.com/en-us/library/cc262787.aspx specifies the total number of unique security scopes to 50.000/list, but recommended is 5.000/list. In a list, is it possible to find out ...
0
votes
2answers
43 views

Who sees a private list

If I set the option of "Read items that were created by the user", who other than the user can still view it? Where can I restrict the list of people who can still view it?
1
vote
0answers
293 views

Data Refresh Account - Login Failure: the user has not been granted the requested logon type at this computer

I am trying to configure my Unattended Data Refresh Account and continue to get the following error with the account I am using: The data refresh for 'sqltestrefresh.xlsx' on Report Center - QA ...
1
vote
1answer
40 views

Managing Site Permissions

I am new to SharePoint and having some difficulty setting up the appropriate permissions. My organization uses a primary landing page that only a few have Owner/Full Control rights to, and then that ...