Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
2answers
187 views

SID and other fields added to user information list?

According to stuff I am reading on the web, when an AD user gets added to SharePoint site the following information will get copied from AD to the user information list: Display name Login name ...
0
votes
1answer
91 views

How to assign permissions to a single publishing page

As I know that a publishing page is a securable object, and in my case I need to grant certain users the permissions to Read certain pages in my publishing site (they cannot read other pages), in ...
2
votes
1answer
193 views

Accessing data from another web application throws an SQLInvalidException

The scenario is: A MySiteHost site collection (example name: MY SITE). Web application's application pool account is spmysite. A TeamSite site collection (example name: TEAM SITE). Web application's ...
1
vote
1answer
183 views

Site Collection Administrators permissions level?

I tried to answer this one via Google but the answers seem quite conflicting. I was wondering if anybody knows this answer definitively, or can reference any Microsoft documentation (I couldn't find ...
0
votes
1answer
224 views

Cryptographic Exception

I have been having this error in SharePoint show up often: An unhandled exception occurred and the process was terminated. Application ID: /LM/W3SVC/1640420947/ROOT Process ID: 5788 Exception: ...
1
vote
1answer
2k views

jQuery SP.JS objects to test if current SharePoint user has full control / owner rigths?

As an example, the below jQuery displays current SharePoint user title. Excellent! :) Is it possible to use the sp.js objects to test If the current user has Full Control on the current page or ...
0
votes
1answer
51 views

Securing files in a library by a people column?

SharePoint Online 2013. Library with a people column added. For the site owner, they can add files at will, but must select a person for that column for every file. But for library members, we ...
0
votes
1answer
24 views

Permissions needed by System security officer

In our current setup. I am responsible for Sharepoint in our company. This means that I do everything from deploying to application support to giving users rights to the platform when it is required. ...
-1
votes
1answer
33 views

security concerns on sharepoint deployment [closed]

I've inherited our company's SP 2010 deployment. I'm looking for security flaws and other potential issues. Any suggestions as to what to look for?
0
votes
1answer
202 views

I want a literal 'Read/view Only' library - no save, download or print functionality. Is this possible?

I have a number of documents that I want to be literally 'Read Only' in a Library (ideally view in the browser). This means that I want to disable the 'Save As', download and print functionality to ...
1
vote
0answers
23 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...
2
votes
1answer
164 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
2
votes
0answers
1k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
0
votes
1answer
58 views

Need extra layer of authentication on SharePoint list

The following below was requested in an effort to eliminate any security isses. (We are currently using the default NTLM authentication): -Create a hidden URL extention for admin's only (new site ...
0
votes
1answer
52 views

Service account to access UNC

I'm trying to access the UNC to copy a file from the UNC share to another location. The way it is set up it requires an interactive challenge for credentials, and I was told there is no way to change ...
0
votes
1answer
65 views

SecurityException on list GetItems

I'm using custom list event receiver on SharePoint Online to process some field in the item. In the Event Receiver, I use a query to another list to retrieve value from that list in to current item. ...
0
votes
2answers
220 views

How to exclude users from view access?

We have a SharePoint 2007 site that is viewable by "All Authenticated Users". As part of company policy, when an employee is terminated or leaves, we modify their active directory account to remain ...
1
vote
1answer
60 views

o365 A2 safe bet for our SharePoint 2013 production farm?

While we build our on-prem SP 2013 we are playing with free o365 A2. We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users. Maybe 500 users using ...
1
vote
1answer
67 views

How to secure SharePoint content

I can navigate to following path and access SharePoint content easily. \\servername@portno\DavWWWRoot\DocLibraryName How to prevent others from accessing this path?
0
votes
1answer
552 views

SharePoint Permissions not working

I am using SharePoint 2010. When I set permissions (I Only grand myself access) on a document library or folder or document EVERYONE can still see it and download the documents. Why is that? What is ...
0
votes
1answer
91 views

SharePoint 2013 Site Collection Move Owner to Group

I am in process of migrating our WSS 3.0 installation to 2013 and I am at the point where I need to break the single site collection down into more manageable sizes and I have a script that ...
2
votes
1answer
102 views

RoleAssigments are being assigned by default to all new pages

I am pretty new to SharePoint, so please let me know if there is some more info or clarification required. I am creating a webapplication with certain SP groups, libraries and pages in that order by ...
0
votes
1answer
40 views

Hide Manager Permissions of Parent

In Document library, when clicking on Actions, users have "Manage Permissions of Parent" and "Edit Permissions". Is there a way to hide the 'Manage Permissions of Parent', as users are accidentally ...
0
votes
0answers
77 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
0
votes
3answers
187 views

Denying the manage rights permission

I'm trying to fullfill a requirement which forces the use of Active Directory groups. I'm having issues getting to where I want to be. Upon creation of a new site, I'm going to use AD groups to ...
0
votes
1answer
73 views

How to show what level of permission a group or user has to a site?

In SharePoint 2007 when you go to a site and view advanced permissions (Site Actions - Site Settings - Modify All Site Settings - Advanced Permissions) you are presented with a page that has a table ...
0
votes
2answers
53 views

Capture SharePoint role group and group members?

For our audit process I need to regularly capture all of our SharePoint role groups (for our main site collection) and the members in each group. Is there a reliable way to approach this problem?
0
votes
1answer
39 views

Frequently Needed Business Rule About Security that SharePoint Does Not Provide OOTB

Suppose that i have two lists like this REGION_LIST [ RegionName(text), RegionResponsibles(multi-select peoplepicker) ] ISSUES_LIST [Some issue related columns, Region(lookup) ] Main requirement is ...
1
vote
0answers
255 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
1
vote
1answer
76 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
2
votes
2answers
1k views

How to set authentication model to allow cross-domain access?

How do I change the security settings to allow cross-domain on the same web-server? I have multiple instance or site collections on the same server but want to make sure that web-services to ...
6
votes
2answers
2k views

ValidateFormDigest - when exactly does it need to be called?

Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest? Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...
3
votes
2answers
449 views

Sharepont 2013 - NTLM Logout

Our SharePoint 2013 site will not log users out unless the browser is completely closed. We are using NTLM authentication but the site is hosted, so it is external accessible. We are afraid users ...
2
votes
1answer
73 views

How to add security to a page using powershell

I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
0
votes
1answer
43 views

giving access to an entire web application

Im trying to elevate someones permissions so that they can edit and add users etc across all site collections in our farm. I added the user into the farm admins group but it doesnt look like their ...
1
vote
2answers
569 views

Best Practices to make my internet facing portal secure

Ok, so I finished developing my internet site. It uses a federation provider to authenticate public user. Now what I'm concern of, is the site security. I see that any logged in user can see the ...
0
votes
1answer
639 views

In SP 2010 or SP2013 How can I have search results use audience targeting

I have items in my document library that are configuered for audience targeting. What I would like to do is have the items in my search results page "search results" web part filter the items at an ...
0
votes
1answer
84 views

Is there a way to limit viewing permissions of list items based on a property?

I have a custom list which has a property "Department" which is a multi-select checkbox list. So each item in this list can be one of multiple different Departments. I would like to make these items ...
1
vote
0answers
215 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
0
votes
1answer
65 views

Conditional SPSecurity.RunWithElevatedPrivileges

Is there a way to use SPSecurity.RunWithElevatedPrivileges conditionally. For example, assume that i have a code block, if some condition is met i want to run this code block in ...
3
votes
0answers
977 views

Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given

Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying: This action couldn't be performed because Office doesn't recognize the ...
0
votes
1answer
177 views

My Site creation failure for user after moving My Sites to dedicated web application

I have created a new web application at port 8080 with the intention of having all personal site creation (i.e. My Sites) stored in a dedicated WSS_Content database (i.e. a best practice ...
0
votes
1answer
52 views

SP2010, are the search index / query component files a risk for highly secure documentation?

Say I have some secure documentation held in SharePoint. Now say the SQL database/BLOB location is encrypted. Enterprise Search is used to crawl this content and therefore the content is indexed. Is ...
3
votes
3answers
2k views

Multiple login prompts are driving users nuts

What are the typical causes of multiple login prompts on sharepoint sites? We have a production site where users who login outside of the domain (from home) are prompted multiple times (3 or so ...
0
votes
2answers
535 views

Is it possible to add a security trim that filters by user groups?

In my left hand side bar I have 3 links to downloads- one for each of three different companies. I need each company to log in and see only the one link to their companies downloads - not all 3 links ...
0
votes
1answer
40 views

Accessing word docs on Sharepoint site. Are files cached locally?

My client wants users to access word and excel docs through the company SharePoint site from remote locations, however he does not want them to have access to the files after they have logged off the ...
0
votes
2answers
65 views

Full Control Permission Problem

I am in a group which has Full Permission (site collection owners). However i cant add users to groups that i am not a member off. I thought this would give me full overriding permissions. Am i ...
1
vote
1answer
457 views

Get Access to List View webpart without having access to list

So I'm developing an event management system at the moment where there are two user groups, "editors" and "attendees". By registering for an event, the SPUser is added to a list "attendeeList" which ...
1
vote
2answers
592 views

I need a Antivirus Scanner for SharePoint 2013

I'm using a Windows 2012 server. With SharePoint server 2013 installed. When I wanted to install Forefront for SharePoint 2010 I get this error. No protectable server applications were detected. ...
1
vote
1answer
820 views

How can I add “All Authenticated users” (FBA) to a SharePoint Group using Powershell?

I have an FBA site and I need to add "all authenticated users" to a group using PowerShell. How can I do that?