Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
2answers
170 views

SP_Admin SQL Permissions

I'm trying to create a web application using powershell and I'm getting a log in error with the SP_Admin account. I'm not sure if I've made a mistake when I was setting up the environment, I might ...
0
votes
1answer
100 views

Access all workflow tasks without being assigned to for validation

I have a request approval sequential workflow that has many tasks created upon approval. For each approval, Im using a custom webpart that shows different panels based on the status of the request. ...
1
vote
1answer
255 views

Approval Status is different given user's permissions. Visitors can see non-approved items

The approval status for blog post items is different given user's permission on a blog site. I had the Draft Item Security setting set to "Only users who can approve items (and the author of the ...
1
vote
0answers
35 views

In SharePoint 2013 is there a security group that allows full access to all content in a farm by default?

I'm setting up a SharePoint 2013 development server and I've added my account to the Farm Admin group. In prior versions this meant that I had access to all content in the farm by default. It looks ...
0
votes
0answers
66 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...
0
votes
0answers
18 views

Security level on SP13

This is the scenario: I have a SP13 in which I'm deploying a File Server, so I created one web application and inside of it one Site Collection for each department. I give Full Control access to a ...
2
votes
1answer
242 views

Access to Default Landing Site without Access to Everything

I have a very basic SharePoint 2010 site collection that was set up as the default Team Site template. My goal is to have domain users be able to navigate to the main landing page of the site ...
1
vote
0answers
180 views

How to restrict access to edit attachments in lists?

We have Windows SharePoint Services 3.0 SP 3 (12.0.0.6608 from CA) on Windows 2003 Server R2 EE. In the main we use our WSS as sort of book of problems. And by book of problems, i mean that there is ...
0
votes
1answer
43 views

Extended Web application

For my project I need to convert a Classic mode Authentication WebApplication (name Sharepoint - 8080) to Claims and add Forms Based Authentication to it. For that matter I extended the webapplication ...
0
votes
1answer
55 views

Creating a column that can only be modified by a group of people

I am creating a simple list (imagine a request for instance) in Sharepoint. This list can be modified by the user, but the field "Status" (Approved, rejected, waiting, -And any status I could imagine) ...
1
vote
1answer
96 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
0
votes
2answers
348 views

What is the correct way to add an AD group to an SP group with permissions?

So in Sharepoint there are 2 ways to see the groups, site settings, people and groups (I see my AD groups there twice), or site setttings permissions, I see the group there only once. All I need is ...
0
votes
1answer
727 views

Security Exception in SharePoint 2010 when executing

My SharePoint 2010 solution comprises of 2 Features. One feature uses the Flee library to do some mathematical calculations in some code behind. The solution has a number of class libraries that I ...
1
vote
2answers
326 views

Are “Security only” crawls kicked off automatically?

I know that if a user is added to a SharePoint group, a crawl needs to run before the ACLs are updated to reflect the new user's permissions. The question that my team is debating is whether or not ...
0
votes
1answer
1k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
1
vote
1answer
163 views

Take ownership over My Sites

Cannot find a way to add an Administrator account (or, for example, Company Administrator group) into Site Collection Administrators list for each of Personal (i.e. My) Sites at SharePoint Online ...
1
vote
1answer
931 views

Call SharePoint custom WCF service from within same SharePoint site

I've built a custom WCF web service that is hosted on a SharePoint server. The service combined SharePoint data with data from a separate database. The service can successfully be called from a ...
0
votes
1answer
415 views

Security is not working after migration to SP2013

We have migrated site from MOSS to Sharepoint 2013 by using OOTB Export\Import APIs. Everything is working fine apart from user security. I can see that all the users are migrated to the destination ...
1
vote
2answers
244 views

SID and other fields added to user information list?

According to stuff I am reading on the web, when an AD user gets added to SharePoint site the following information will get copied from AD to the user information list: Display name Login name ...
0
votes
1answer
140 views

How to assign permissions to a single publishing page

As I know that a publishing page is a securable object, and in my case I need to grant certain users the permissions to Read certain pages in my publishing site (they cannot read other pages), in ...
2
votes
1answer
268 views

Accessing data from another web application throws an SQLInvalidException

The scenario is: A MySiteHost site collection (example name: MY SITE). Web application's application pool account is spmysite. A TeamSite site collection (example name: TEAM SITE). Web application's ...
1
vote
1answer
244 views

Site Collection Administrators permissions level?

I tried to answer this one via Google but the answers seem quite conflicting. I was wondering if anybody knows this answer definitively, or can reference any Microsoft documentation (I couldn't find ...
0
votes
1answer
457 views

Cryptographic Exception

I have been having this error in SharePoint show up often: An unhandled exception occurred and the process was terminated. Application ID: /LM/W3SVC/1640420947/ROOT Process ID: 5788 ...
1
vote
1answer
3k views

jQuery SP.JS objects to test if current SharePoint user has full control / owner rigths?

As an example, the below jQuery displays current SharePoint user title. Excellent! :) Is it possible to use the sp.js objects to test If the current user has Full Control on the current page or ...
0
votes
1answer
53 views

Securing files in a library by a people column?

SharePoint Online 2013. Library with a people column added. For the site owner, they can add files at will, but must select a person for that column for every file. But for library members, we ...
0
votes
1answer
26 views

Permissions needed by System security officer

In our current setup. I am responsible for Sharepoint in our company. This means that I do everything from deploying to application support to giving users rights to the platform when it is required. ...
-1
votes
1answer
33 views

security concerns on sharepoint deployment [closed]

I've inherited our company's SP 2010 deployment. I'm looking for security flaws and other potential issues. Any suggestions as to what to look for?
0
votes
1answer
407 views

I want a literal 'Read/view Only' library - no save, download or print functionality

I have a number of documents that I want to be literally 'Read Only' in a Library (ideally view in the browser). This means that I want to disable the 'Save As', download and print functionality to ...
1
vote
0answers
25 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...
2
votes
1answer
336 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
2
votes
0answers
1k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
0
votes
1answer
63 views

Need extra layer of authentication on SharePoint list

The following below was requested in an effort to eliminate any security isses. (We are currently using the default NTLM authentication): -Create a hidden URL extention for admin's only (new site ...
0
votes
1answer
59 views

Service account to access UNC

I'm trying to access the UNC to copy a file from the UNC share to another location. The way it is set up it requires an interactive challenge for credentials, and I was told there is no way to change ...
0
votes
1answer
68 views

SecurityException on list GetItems

I'm using custom list event receiver on SharePoint Online to process some field in the item. In the Event Receiver, I use a query to another list to retrieve value from that list in to current item. ...
0
votes
2answers
302 views

How to exclude users from view access?

We have a SharePoint 2007 site that is viewable by "All Authenticated Users". As part of company policy, when an employee is terminated or leaves, we modify their active directory account to remain ...
1
vote
1answer
64 views

o365 A2 safe bet for our SharePoint 2013 production farm?

While we build our on-prem SP 2013 we are playing with free o365 A2. We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users. Maybe 500 users using ...
1
vote
1answer
76 views

How to secure SharePoint content

I can navigate to following path and access SharePoint content easily. \\servername@portno\DavWWWRoot\DocLibraryName How to prevent others from accessing this path?
0
votes
1answer
698 views

SharePoint Permissions not working

I am using SharePoint 2010. When I set permissions (I Only grand myself access) on a document library or folder or document EVERYONE can still see it and download the documents. Why is that? What is ...
0
votes
1answer
107 views

SharePoint 2013 Site Collection Move Owner to Group

I am in process of migrating our WSS 3.0 installation to 2013 and I am at the point where I need to break the single site collection down into more manageable sizes and I have a script that ...
2
votes
1answer
108 views

RoleAssigments are being assigned by default to all new pages

I am pretty new to SharePoint, so please let me know if there is some more info or clarification required. I am creating a webapplication with certain SP groups, libraries and pages in that order by ...
0
votes
1answer
41 views

Hide Manager Permissions of Parent

In Document library, when clicking on Actions, users have "Manage Permissions of Parent" and "Edit Permissions". Is there a way to hide the 'Manage Permissions of Parent', as users are accidentally ...
0
votes
0answers
86 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
0
votes
3answers
295 views

Denying the manage rights permission

I'm trying to fullfill a requirement which forces the use of Active Directory groups. I'm having issues getting to where I want to be. Upon creation of a new site, I'm going to use AD groups to ...
0
votes
1answer
76 views

How to show what level of permission a group or user has to a site?

In SharePoint 2007 when you go to a site and view advanced permissions (Site Actions - Site Settings - Modify All Site Settings - Advanced Permissions) you are presented with a page that has a table ...
0
votes
2answers
53 views

Capture SharePoint role group and group members?

For our audit process I need to regularly capture all of our SharePoint role groups (for our main site collection) and the members in each group. Is there a reliable way to approach this problem?
0
votes
1answer
39 views

Frequently Needed Business Rule About Security that SharePoint Does Not Provide OOTB

Suppose that i have two lists like this REGION_LIST [ RegionName(text), RegionResponsibles(multi-select peoplepicker) ] ISSUES_LIST [Some issue related columns, Region(lookup) ] Main requirement is ...
1
vote
0answers
323 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
1
vote
1answer
82 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
2
votes
2answers
2k views

How to set authentication model to allow cross-domain access?

How do I change the security settings to allow cross-domain on the same web-server? I have multiple instance or site collections on the same server but want to make sure that web-services to ...
6
votes
2answers
2k views

ValidateFormDigest - when exactly does it need to be called?

Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest? Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...