Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
2answers
533 views

authentication between host-named site collection, https and http

Here's my situation and I'm wondering what the best way to solve it is. I have two domains and I'm trying to pass credentials between them. Maybe it's not possible, but here goes...... Domain One ...
0
votes
1answer
103 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
4
votes
1answer
267 views

What has changed that the security scope limit for SharePoint 2010 is no longer 1000?

What appear to be outdated blog posts everywhere tell you to not exceed 1,000 security scopes per list. Some even provide hard evidence as to why this is a bad idea. What they seem to have in common, ...
0
votes
2answers
1k views

Prevent “Access Denied” error for domain users

I would like all members of the DOMAIN\Domain Users' or 'DOMAIN\Users' AD groups to have read-only access to a site collection and its subsites. I have added these groups to Site Permissions at the ...
3
votes
2answers
322 views

Access Denied from Migrated SP2010 -> 2013 Web App

I've migrated a web application's content database from SP2010 to SP2013. After the migration was complete, I am completely locked out of the web application. Navigating to the root site collection ...
0
votes
1answer
58 views

Login page insted of login prompt in Sharepoint 2013

I have been create a Team Suite site in Sharepoint 2013.When any body try to start seeing site pages a logon window like below image display : How I can show custom login page instead of this ...
0
votes
0answers
22 views

Get request information in IMSO_VirusScanner interface's scan and clean method

I am trying to get current sharepoint's request information in scan/clean method of SharePoint's IMSO_VirusScanner interface. We are getting SPContext in initialize method but not in scan/clean ...
0
votes
3answers
231 views

What is best way manage SharePoint webpart access to database?

I have my custom webpart, which have access to database. I need to configure data source, catalog, username and password, which allows webpart a access database. I don't want that users can see, what ...
0
votes
1answer
163 views

CSOM Form based authentication Security issue

I'm new in sharepoint development, I was looking for authenticating users via CSOM by using forms based authentication and I found below code. ClientContext ctx = new ...
1
vote
1answer
1k views

SharePoint 2007: Farm administrator process

I have run into an interesting issue. We added a new user as a Farm Admin on the SharePoint 2007 env. The next day the user's account was disabled by IT as it was flagged by monitoring as the SPS ...
1
vote
1answer
2k views

The remote server returned an error: (401) Unauthorized. on new App

I created a new app by following this tutorial http://blogs.msdn.com/b/bspann/archive/2013/01/19/asp-net-mvc-based-apps-for-sharepoint-2013-on-premises.aspx I was able to press F5 and it showed me ...
1
vote
1answer
2k views

ClientContext security won't work with claims-based SP2010 security enabled

I want to connect to SP2010 server with claims based authorization via client context. But I have security issue. First I didn't managed to connect with default credentials. Then I wrote: ...
2
votes
4answers
4k views

Field-Level Security

Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
1
vote
1answer
70 views

Strange SharePoint behaviour regarding “Check Permissions” in a web part

I have a web part in which I am displaying users from User Profile Service which is synced with AD. In my code I get all the users in current site and then see if they are part of any group. If they ...
0
votes
1answer
174 views

Can we add OU in SharePoint security group

Can we add OU in SharePoint security group instead of adding users or AD group?
3
votes
2answers
3k views

Sign in as a different user access denied

Clicking the "sign in as a different user" link from the system menu in SP 2010 yields an access denied error. URL is: \_layouts\closeConnection.aspx?loginasanotheruser=true any ideas?
2
votes
0answers
48 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
3
votes
0answers
1k views

Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given

Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying: This action couldn't be performed because Office doesn't recognize the ...
1
vote
2answers
2k views

PowerShell to Remove Site User Permission

I am looking for some help removing a User Permission from a site using PowerShell.
0
votes
1answer
197 views

How to use versioning when using same .snk file for multiple SharePoint projects in the same solution?

I am trying to find the right way to set up my SharePoint solution with miltiple projects (in VS2012). In that, I am having difficulty understanding the concept of reusing the strong name key file. ...
1
vote
2answers
122 views

How to set a powershell variable to a specific sharepoint page

I have a SharePoint 2010 documents library that contains about 50 .aspx pages. I want to break inheritance on about 6 pages and set them to specific permissions. I am able to get a page by numerical ...
0
votes
2answers
817 views

SharePoint 2010 Top Link Inheritence and Permissions

We have an issue in SharePoint (Enterprise) 2010 with our Top Link NavBar inheritance and permissions across sub-sites. Current Configuration We have a root site collection: RSC1. Under the root ...
1
vote
3answers
4k views

How to get user security group name through javascript

I use the following code in javascript to display name of logged in user. SP.SOD.executeFunc('sp.js', 'SP.ClientContext', getUserData); Is there a code that will also tell me security group of ...
0
votes
1answer
923 views

Powershell and CredSSP in Production Environments

I try deploy Sharepoint WSP projects using PowerShell Remoting. See PowerShell Remoting Sharepoint 2010 Error Solution is configure CredSSP for Sharepoint. But Microsoft says: Caution: Credential ...
0
votes
2answers
62 views

Disabling direct access to list and library

I have a publishing site in which there are several lists and libraries. I am displaying some list and libraries on home page and applied XSLT on them to give them desired look and feel. There is a ...
1
vote
0answers
27 views

Fine-tuning SP2013 Document Library permissions

I have the need to give access to a role for creating documents and folders in a document library and giving access to another role to create documents (but not folders) How would I go about doing ...
0
votes
1answer
103 views

Access control on list items based on the item's value

How can I restrict permissions (read/write) on list items based on the item's value? For ( a simplistic) example, I have a list "Appraisals" which has two entries - Manager and Employee of type ...
1
vote
1answer
429 views

Powershell to add users to custom security groups - getting 0x80070005 error

The following powershell reads an xml file and adds users to custom SharePoint security groups. If ([bool](([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) ...
1
vote
1answer
47 views

Sharepoint Foundation 2010 Hardening

I have never hardened a SharePoint site before and I am having a hard time using all the recommendations I find online. This blog post discusses the different accounts that should be used for ...
1
vote
3answers
195 views

List Security in Sharepoint

I need to set permissions for a list that looks like this: I have two different teams, each with a team lead and 3 team members. The team members should not see each others data. Team leaders have ...
1
vote
0answers
107 views

FBA Custom login page to use 2 factor authentication - simplified

User provides an username/password. Should validate those and only then proceed to step 2. User provides an additional authentication token. If succeeds user is authenticated against SharePoint and ...
0
votes
1answer
394 views

How to give access programatically to a site

In my scenario we want to customize the access request page. We already know how to create an application page, and with a powershell command, instruct sharepoint to use that page instead. ...
1
vote
4answers
3k views

Modifying the current list item in a workflow

I have a workflow running when an item is adding to a document library. In this workflow, I have a code activity that I am attempting to set permissions to the list item. I am trying to break ...
0
votes
1answer
131 views

Limited Access permission being applied for a user at the root site

I have a list where security inheritance is not enabled. On adding an item to a list in the ItemAdded event receiver I'm applying custom security to the list item. The consequence of doing this is ...
2
votes
1answer
43 views

Audit the adminstrator

we are looking into the possibility of outsouring the administration of our farm. Because of the nature of sensitive data inside some of the site collection, we want to prevent data leakage. We want ...
2
votes
1answer
21 views

mandatory security group

trying to solve a permission issue. We have created a custom permission level called Site Owner that removes the ability to create subsites but keeps everything else, including the ability to edit ...
1
vote
3answers
38 views

Why can people change other people's items even though I set it up not to?

I have created a shared list where members can add new items and edit their own items. These members only have the ability to contribute, and not the ability to manage lists. In the list's advanced ...
0
votes
0answers
66 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...
2
votes
1answer
621 views

Make all sharepoint specific cookies non-persistent?

Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
6
votes
5answers
2k views

What is the difference between SPContext.Current.Web and SPContext.Current.Site.OpenWeb()?

My colleague found that some scenarios of working with SPWeb objects depend on how you obtain them. I'm not talking of impersonating with UserTokens - that another story. But at times when you write ...
1
vote
1answer
194 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
0answers
28 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
0
votes
1answer
339 views

Security Permissions broke while restoring the site on a new farm

I got a problem while restoring SP2010 sub-site from our old SP2010 farm to new farm through a full backup. The subsite on old farm had unique permissions. As well as the lists inside the sub-site ...
1
vote
2answers
488 views

How can I learn how to create a delegation engine? [closed]

One of the last places I worked at had a delegation engine in SharePoint, a SharePoint List that specified the SharePoint groups that would be sought for approval for a workflow based on that ...
0
votes
2answers
498 views

Using JavaScript to redirect a page

I am using JavaScript to redirect users who aren't owners to a different page. I am using $(document).ready(function() { //check owner status if(!isOwner) { ...
2
votes
3answers
900 views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
0
votes
1answer
100 views

Access all workflow tasks without being assigned to for validation

I have a request approval sequential workflow that has many tasks created upon approval. For each approval, Im using a custom webpart that shows different panels based on the status of the request. ...
1
vote
1answer
255 views

Approval Status is different given user's permissions. Visitors can see non-approved items

The approval status for blog post items is different given user's permission on a blog site. I had the Draft Item Security setting set to "Only users who can approve items (and the author of the ...
1
vote
2answers
171 views

SP_Admin SQL Permissions

I'm trying to create a web application using powershell and I'm getting a log in error with the SP_Admin account. I'm not sure if I've made a mistake when I was setting up the environment, I might ...
0
votes
1answer
43 views

Extended Web application

For my project I need to convert a Classic mode Authentication WebApplication (name Sharepoint - 8080) to Claims and add Forms Based Authentication to it. For that matter I extended the webapplication ...