Security is the protection of information and property from theft.
0
votes
0answers
455 views
Programmatically add multiple users to various groups based on information in a list
Due to security restrictions, my organization has a very complex group structure granting fine-grained permissions. We are trying to build a portal that allows for an approval system for group ...
1
vote
2answers
481 views
Allow a specific file type to be rendered in iFrame
We've been looking at enabling the Permissive File Handling in Central Admin of our SharePoint 2010 on an intranet site collection. However, we're wondering if we can allow specific file types to be ...
3
votes
1answer
387 views
Sharepoint manage trust/add certificate
Hi I try to add a certificate under "central administration>security>manage trust" but I alwas get following error.
The Root Certificate that was just selected is invalid. This may be
...
0
votes
2answers
285 views
Is an UpdatePanel a bad decision?
After talking to a few people, and asking around here, I feel like the only way to securely do calls asynchronously is with an updatepanel.
(Context: Creating an Upvote/Downvote system on SharePoint ...
0
votes
0answers
607 views
Why does a workflow cancel with “access denied” for all but users with Full Control accesse?
I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
1
vote
1answer
108 views
Audit log a specific user (or: Monitor the admin)
Is it possible to audit log only specific users (thus keeping the Audit-log under control and not harming performance)?
Background Sitecolletion admins can view and edit everything (de facto SP ...
0
votes
1answer
77 views
Adding/Updating to a SharePoint List with AJAX securely?
I'm creating a Site Definition that will have a Stack Overflow like Q/A system.
I'm hung up on the upvote/downvote system.
I see a number of ways to do this, but what I think works best is to have ...
2
votes
1answer
330 views
Make all sharepoint specific cookies non-persistent?
Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
0
votes
1answer
124 views
Site Permissions AD Query
When assigning permissions to a site in Sharepoint 2010, is it possible instead of specifically adding a group or a user, to create an LDAP query or something simular.
For example I have a group ...
0
votes
1answer
176 views
Security Permissions broke while restoring the site on a new farm
I got a problem while restoring SP2010 sub-site from our old SP2010 farm to new farm through a full backup. The subsite on old farm had unique permissions. As well as the lists inside the sub-site ...
2
votes
2answers
74 views
Should I patch my intranet SharePoint?
SharePoint patching is a hassle and takes a lot of time to test and deploy,
My SharePoint is an intranet site (within my organization's premises).
Some fellow IT admins advised me to patch only ...
2
votes
1answer
88 views
Extending SharePoint groups metadata?
In an application I'm building, I have to create and manage groups based on business rules. Each group must have properties like managers (yes, several managers) and members, with some other ...
7
votes
1answer
263 views
How does EU Cookie law affects SharePoint Sites?
The Euorpean Union has forced a new cookie law to protect privacy of a user. The full documentation is at
Information Commissioner’s Office guidance
According to an extract from the above document,
...
2
votes
3answers
1k views
How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)
Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
2
votes
3answers
2k views
Field-Level Security
Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
1
vote
1answer
985 views
What are the relationship between administrators groups of domain, dev computer and of Sharepoint services?
I know-know I can search and read but anyway I would need to ask in order to escape possible typos, personal misunderstandings and to better remember.
I develop on a machine with installed ...
1
vote
1answer
787 views
“DWORD (32-bit) Value” or “”Qword (32-bit) Value" - which one should I configure in Windows 64-bit registry?
"DisableLoopbackCheck & SharePoint: What every admin and developer should know" advises to disable ("infamous") "loopback check" completely on dev machine by following
"You receive error 401.1 ...
0
votes
1answer
252 views
“404 FILE NOT FOUND” on my username entries
In Sharepoint 2010 Central Administration --> Security --> Manage the farm admii
nistrator group (Central Administration : Site Settings : People and Groups - Farm Administrators), when I click on my ...
0
votes
1answer
78 views
Right Management Sharepoint
I have a sharepoint list. Users should be able to create new items and change some attributes. I gave full access for the users on the list items. But now I think there is a security gap:
what ...
0
votes
0answers
181 views
Windows Authentication inside custom WebPart
I have created a custom web part that let's the user sign in using their windows accounts. However, the I get Object Not Set to the Reference error when I set the SetPrincipalAndWriteSessionToken. ...
0
votes
0answers
179 views
Authenticating to sharepoint with kerberos from a java HttpClient
I have a linux\java6 client that will authenticate to sharepoint2010 with NTLM and then send HTTP REST web services using Apache Commons HttpClient.
I can do this with NTLM , but I want to use the ...
0
votes
1answer
333 views
Sharepoint 2010 users strangely removed from Sharepoint Group (Expert Advise required)
Since 3 months client portal was working fine suddenly due to some network problem we restarted SharePoint server, after that some Active directory users complained system was inaccessible, where ...
2
votes
1answer
385 views
Uploading files using object model
I'm experiencing some problems adding documents to a library using the object model.
I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
1
vote
3answers
342 views
Item-Level Security Boundaries
Item-Level security boundaries are defined in the Software boundaries document at 1000 items.
In the Advanced List Settings you can specify Item-level Permissions to "Create items and edit items that ...
1
vote
1answer
283 views
Get list items even if user does not have access to those items
Is there a way to get items from a list even if the current user does not actually have acces to them? SPSecurity.RunWithElevatedPrivileges does not seem to work!
I have a special case in which I ...
0
votes
2answers
402 views
All users in multi tenant environment
I have a problem with authentication in a multi tenant environment. I have a couple of seperate customers which all have their own SharePoint environment within our hosted environment. In the AD, I ...
1
vote
3answers
2k views
Sharepoint 2010 Item level Permission to a Document Library is Our approach right?
We are planing to apply Item level Permission on document library and want share point experts advise...are we going right way or we will fall in performance issue or others..
What We Have :
1- We ...
1
vote
1answer
663 views
Exception occurred while connecting to wcf endpoint
I get very strange exception "exception occured while connecting to wcf endpoint .... access denied". only when I go to any Document Library.
I logged on as Administrator and I have added "Full ...
0
votes
1answer
70 views
Is AddAndCustomizePages only available at site level?
I've read this forum entry which states that it is not possible to have AddAndCustomizePages work at lower than I site level. I have .aspx pages in a folder and I would like my SharePoint group to ...
0
votes
2answers
244 views
authentication between host-named site collection, https and http
Here's my situation and I'm wondering what the best way to solve it is.
I have two domains and I'm trying to pass credentials between them. Maybe it's not possible, but here goes......
Domain One
...
0
votes
1answer
923 views
User Profile Application Proxy failed to retrieve partitions from User profile application - Cant access application either
I am experiancing an issue where ever so often the sharepoint (2010) site keeps throwing security errors(The security validation
for this page is invalid) iisreset fixes this shortly but ...
1
vote
2answers
1k views
PowerShell to Remove Site User Permission
I am looking for some help removing a User Permission from a site using PowerShell.
0
votes
1answer
177 views
SpServices Cannot Get Sub-Sites without Being Site Collection Admin
I am building a web part which is delegated by permissions. It is displayling members of the Members group and Owners group onto the page, and if a user does not have Members or Owners permissions, ...
0
votes
3answers
2k views
Get name of Farm account using Powershell
How can I get the name of the Farm account ? I can see it listed in Get-SPManagedAccount, but do not see any properties on the SPManagedAccount objects to be able to dynamically filter by and ...
0
votes
3answers
362 views
Access Denied for SPUserCollection.remove()
Works for administrator but not working for a normal user.
I even tried it with "SPSecurity.RunWithElevatedPrivileges(delegate() {});" after breaking RoleInheritance, and even tried ...
2
votes
1answer
182 views
RunWithElevatedPrivileges doesn't work in Webpart Constructor
With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
1
vote
1answer
82 views
Cannot read site collection details with some accounts
In my SharePoint environment, I have a few seperate web applications with some different admin users. Now a new user I created is added as local admin (needed for Powershell remoting) and farm admin. ...
0
votes
1answer
129 views
How to prevent members of a certain group from filling out, submitting or even viewing a form?
Lets say I have a few users in a group called "Restricted" and I don't want them to be able to view or submit forms. Should I add some code in the Form_Loading event that checks what groups the ...
1
vote
0answers
277 views
Get Permissions with client object model
i want to add a permission on a folder who's inside a document library with javascript/jquery/client object model.
The problem i have is, its a custom permission level created when some feature is ...
0
votes
1answer
267 views
Javascript, cannot complete this action
i am currently running some code on a sharepoint front end and am getting this error
"Microsoft.SharePoint.SPException"
"Cannot complete this action.\n\nPlease try again."
So i looked into this and ...
1
vote
1answer
841 views
Security on Document Library's item
i need to add some security to a Document Library, i want to be able to have multiple folders and multiple documents. This feature would provide users with proper right to modify, read, hide documents ...
5
votes
3answers
2k views
Google Analytics for an Intranet Site
I installed the Google Analytics tracking code in an intranet site, it works properly. But my concern is, are there any security risks of using it for an intranet site? simply, is it ok to use Google ...
0
votes
1answer
771 views
EnsureUser throws The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your operation again
I have this code:
The EnsureUser Line is throwing me that exception, any idea?
The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your ...
1
vote
1answer
430 views
Dissappearing SharePoint Groups
SharePoint groups started to disappear- totally randomly, within a single site collection. I am pretty sure they are not deleted because we have few site collection admins with knowledge.
like this:
...
0
votes
2answers
3k views
Stop inheriting permissions programatically
I want to set read permissions to some sharepoint groups to a list.
For existing sites I did it manually, Stop Inherit permissions. Then on groups I chose the groups and edited their permissions, ...
1
vote
1answer
38 views
List permissions
I want to disallow a specific list only to be only read only for all users in the site.
The only one with permissions would be the site collection administrator of course.
I stoped inheriting ...
0
votes
1answer
132 views
Can I BreakRoleInheritance for root folder in #SharePoint library?
Can I BreakRoleInheritance for root folder in SharePoint library. list.RootFolder.Item ruturn null.
4
votes
1answer
217 views
Fine grained permission control using Web App Zones?
I am using SharePoint 2010 Server.
I am trying to understand (and test out) all the various options for using different authentication sources for internal and external users on a site that can be ...
0
votes
2answers
1k views
Risks of using Permissive vs. Strict for Browser File Handling
We have some web sites in our SharePoint 2010 site collection that need to display SWF files (to play FLV videos). For SharePoint to render the videos, we go to the web application in Central Admin > ...
0
votes
2answers
1k views
Sharepoint output list of users
I would like to output the users of a group, for 40 groups, or for every group within the SharePoint Portal. I would like to do this programatically through powershell or a command line tool for the ...
