Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
4answers
3k views

Modifying the current list item in a workflow

I have a workflow running when an item is adding to a document library. In this workflow, I have a code activity that I am attempting to set permissions to the list item. I am trying to break ...
0
votes
0answers
48 views

Multiple, overlapping group membership - does not result in most permissive rights

I've got a site with two document libraries. I have users set up in two Active Directory groups, and mapped those groups to two Sharepoint groups. (i.e. the only member in the SP group is an AD ...
0
votes
1answer
92 views

Limited Access permission being applied for a user at the root site

I have a list where security inheritance is not enabled. On adding an item to a list in the ItemAdded event receiver I'm applying custom security to the list item. The consequence of doing this is ...
2
votes
1answer
43 views

Audit the adminstrator

we are looking into the possibility of outsouring the administration of our farm. Because of the nature of sensitive data inside some of the site collection, we want to prevent data leakage. We want ...
2
votes
1answer
21 views

mandatory security group

trying to solve a permission issue. We have created a custom permission level called Site Owner that removes the ability to create subsites but keeps everything else, including the ability to edit ...
0
votes
0answers
36 views

SharePoint Security Token Service - High CPU Usage

We are currently experiencing high CPU usage coming from the Security Token Service IIS Worker process. If we cycle the application pool the CPU usage drops down to normal levels. We aren't noticing ...
1
vote
3answers
37 views

Why can people change other people's items even though I set it up not to?

I have created a shared list where members can add new items and edit their own items. These members only have the ability to contribute, and not the ability to manage lists. In the list's advanced ...
0
votes
0answers
64 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...
2
votes
1answer
520 views

Make all sharepoint specific cookies non-persistent?

Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
5
votes
5answers
2k views

What is the difference between SPContext.Current.Web and SPContext.Current.Site.OpenWeb()?

My colleague found that some scenarios of working with SPWeb objects depend on how you obtain them. I'm not talking of impersonating with UserTokens - that another story. But at times when you write ...
1
vote
1answer
149 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
0answers
27 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
0
votes
1answer
222 views

Cryptographic Exception

I have been having this error in SharePoint show up often: An unhandled exception occurred and the process was terminated. Application ID: /LM/W3SVC/1640420947/ROOT Process ID: 5788 Exception: ...
0
votes
1answer
302 views

Security Permissions broke while restoring the site on a new farm

I got a problem while restoring SP2010 sub-site from our old SP2010 farm to new farm through a full backup. The subsite on old farm had unique permissions. As well as the lists inside the sub-site ...
1
vote
2answers
311 views

How can I learn how to create a delegation engine? [closed]

One of the last places I worked at had a delegation engine in SharePoint, a SharePoint List that specified the SharePoint groups that would be sought for approval for a workflow based on that ...
0
votes
2answers
335 views

Using JavaScript to redirect a page

I am using JavaScript to redirect users who aren't owners to a different page. I am using $(document).ready(function() { //check owner status if(!isOwner) { ...
1
vote
3answers
650 views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
0
votes
1answer
82 views

Access all workflow tasks without being assigned to for validation

I have a request approval sequential workflow that has many tasks created upon approval. For each approval, Im using a custom webpart that shows different panels based on the status of the request. ...
1
vote
1answer
164 views

Approval Status is different given user's permissions. Visitors can see non-approved items

The approval status for blog post items is different given user's permission on a blog site. I had the Draft Item Security setting set to "Only users who can approve items (and the author of the ...
1
vote
2answers
104 views

SP_Admin SQL Permissions

I'm trying to create a web application using powershell and I'm getting a log in error with the SP_Admin account. I'm not sure if I've made a mistake when I was setting up the environment, I might ...
0
votes
1answer
41 views

Extended Web application

For my project I need to convert a Classic mode Authentication WebApplication (name Sharepoint - 8080) to Claims and add Forms Based Authentication to it. For that matter I extended the webapplication ...
1
vote
0answers
33 views

In SharePoint 2013 is there a security group that allows full access to all content in a farm by default?

I'm setting up a SharePoint 2013 development server and I've added my account to the Farm Admin group. In prior versions this meant that I had access to all content in the farm by default. It looks ...
0
votes
0answers
16 views

Security level on SP13

This is the scenario: I have a SP13 in which I'm deploying a File Server, so I created one web application and inside of it one Site Collection for each department. I give Full Control access to a ...
0
votes
0answers
50 views

Block all access from a URL not on the alternate access list

I recently noticed warnings similar to the following in the log viewer: Event 8059 Alternate access mappings have not been configured. Users or services are accessing the site http://< ...
2
votes
1answer
170 views

Access to Default Landing Site without Access to Everything

I have a very basic SharePoint 2010 site collection that was set up as the default Team Site template. My goal is to have domain users be able to navigate to the main landing page of the site ...
1
vote
0answers
156 views

How to restrict access to edit attachments in lists?

We have Windows SharePoint Services 3.0 SP 3 (12.0.0.6608 from CA) on Windows 2003 Server R2 EE. In the main we use our WSS as sort of book of problems. And by book of problems, i mean that there is ...
0
votes
0answers
36 views

SharePoint permissions using PowerShell SPWeb

I've been going through the MS Cert 70-667 training kit and one of the exercises was to run: Get-SPWebApplication -IncludeCentralAdministration | Get-SPSite -Limit ALL | Get-SPWeb -Limit ALL ...
0
votes
1answer
40 views

Hide Manager Permissions of Parent

In Document library, when clicking on Actions, users have "Manage Permissions of Parent" and "Edit Permissions". Is there a way to hide the 'Manage Permissions of Parent', as users are accidentally ...
0
votes
0answers
178 views

SPO - Exchange Distribution Lists vs Security Groups vs SharePoint Permission Groups

We are looking to move to SharePoint Online 2013. We have users in our On-Prem MOSS 2007 environment that use Exchange Distribution Lists to Email in outlook, Provision and send email alerts from ...
0
votes
1answer
42 views

Creating a column that can only be modified by a group of people

I am creating a simple list (imagine a request for instance) in Sharepoint. This list can be modified by the user, but the field "Status" (Approved, rejected, waiting, -And any status I could imagine) ...
1
vote
1answer
90 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
0
votes
2answers
234 views

What is the correct way to add an AD group to an SP group with permissions?

So in Sharepoint there are 2 ways to see the groups, site settings, people and groups (I see my AD groups there twice), or site setttings permissions, I see the group there only once. All I need is ...
2
votes
1answer
534 views

What is neccesary to write to filesystem from a Web Part?

How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages. The SP2010 app pool is running ...
1
vote
2answers
228 views

Are “Security only” crawls kicked off automatically?

I know that if a user is added to a SharePoint group, a crawl needs to run before the ACLs are updated to reflect the new user's permissions. The question that my team is debating is whether or not ...
7
votes
3answers
7k views

Why are user permissions set in AD not updated immediately to SharePoint?

I have a SharePoint 2010 Foundation installation on Windows 2008 R2 and SQL Server 2008 and using Claims and Windows authentication. Subsites are visible only to members of a certain group. However, ...
4
votes
1answer
2k views

How do I remove all users from an SPGroup object?

I have an SPGroup object populated, how can I remove all members from the group, so that essentially I start with a fresh group. I can't delete and recreate it, so I need a way to work with the ...
0
votes
1answer
610 views

Call SharePoint custom WCF service from within same SharePoint site

I've built a custom WCF web service that is hosted on a SharePoint server. The service combined SharePoint data with data from a separate database. The service can successfully be called from a ...
0
votes
1answer
288 views

Security is not working after migration to SP2013

We have migrated site from MOSS to Sharepoint 2013 by using OOTB Export\Import APIs. Everything is working fine apart from user security. I can see that all the users are migrated to the destination ...
4
votes
4answers
3k views

Why is SharePoint_Shell_Access permission required to run SharePoint powershell?

So we're setting up a SharePoint farm and it seems our admin accounts require access SharePoint_Shell_Access role on SQL. http://technet.microsoft.com/en-us/library/ee806878.aspx ...
1
vote
2answers
186 views

SID and other fields added to user information list?

According to stuff I am reading on the web, when an AD user gets added to SharePoint site the following information will get copied from AD to the user information list: Display name Login name ...
0
votes
1answer
89 views

How to assign permissions to a single publishing page

As I know that a publishing page is a securable object, and in my case I need to grant certain users the permissions to Read certain pages in my publishing site (they cannot read other pages), in ...
2
votes
1answer
189 views

Accessing data from another web application throws an SQLInvalidException

The scenario is: A MySiteHost site collection (example name: MY SITE). Web application's application pool account is spmysite. A TeamSite site collection (example name: TEAM SITE). Web application's ...
1
vote
1answer
182 views

Site Collection Administrators permissions level?

I tried to answer this one via Google but the answers seem quite conflicting. I was wondering if anybody knows this answer definitively, or can reference any Microsoft documentation (I couldn't find ...
0
votes
1answer
51 views

Securing files in a library by a people column?

SharePoint Online 2013. Library with a people column added. For the site owner, they can add files at will, but must select a person for that column for every file. But for library members, we ...
0
votes
3answers
184 views

Denying the manage rights permission

I'm trying to fullfill a requirement which forces the use of Active Directory groups. I'm having issues getting to where I want to be. Upon creation of a new site, I'm going to use AD groups to ...
0
votes
1answer
24 views

Permissions needed by System security officer

In our current setup. I am responsible for Sharepoint in our company. This means that I do everything from deploying to application support to giving users rights to the platform when it is required. ...
-1
votes
1answer
33 views

security concerns on sharepoint deployment [closed]

I've inherited our company's SP 2010 deployment. I'm looking for security flaws and other potential issues. Any suggestions as to what to look for?
0
votes
2answers
2k views

Risks of using Permissive vs. Strict for Browser File Handling

We have some web sites in our SharePoint 2010 site collection that need to display SWF files (to play FLV videos). For SharePoint to render the videos, we go to the web application in Central Admin > ...
0
votes
1answer
197 views

I want a literal 'Read/view Only' library - no save, download or print functionality. Is this possible?

I have a number of documents that I want to be literally 'Read Only' in a Library (ideally view in the browser). This means that I want to disable the 'Save As', download and print functionality to ...
1
vote
0answers
23 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...