Security is the protection of information and property from theft.

learn more… | top users | synonyms

2
votes
4answers
8k views

How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)

Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
2
votes
1answer
3k views

What are the relationship between administrators groups of domain, dev computer and of Sharepoint services?

I know-know I can search and read but anyway I would need to ask in order to escape possible typos, personal misunderstandings and to better remember. I develop on a machine with installed ...
2
votes
1answer
805 views

Change List Item Permission via Web Services?

Using web services, is there a way to assign a list item different security than the rest of the list? Lets say I have 3 rows in the list and 2 different groups. 1. A ; Group A & B can see ...
2
votes
1answer
4k views

How do I export site security groups and memberships with PowerShell?

I'm looking for a PowerShell script (or tool) to export a site's groups and group memberships to a text file. These files would be used as backup for the current security configuration in case the ...
2
votes
3answers
2k views

How do I find out what a group has permission to?

I'm cleaning up a farm that has loads of junk groups on it. Is there an easy way to tell if any of these groups have been assigned access to anything? The intention is to delete groups that have ...
2
votes
2answers
1k views

Access Denied Error while updating the web.config

I am using a third party control for my application in SharePoint 2010 and I need to add entries in the web.config of the web application. Programmatically I have added the entries in the code and ...
2
votes
2answers
417 views

Prevent Access to Custom Web Application Pages by Non-Admin Users

I have a custom web application that integrates with a SharePoint (MOSS 2007) solution. I would like to add role-based access to pages in this custom web application, with only users in a specified ...
2
votes
2answers
22 views

What's the purpose of deny all anonymous policy

When we configure anonymous policy for a web application, there is an option for "deny all". Why is that? We can just disable anonymous access, right? Why would we enable anonymous access and use a ...
2
votes
2answers
7k views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
2
votes
1answer
23 views

mandatory security group

trying to solve a permission issue. We have created a custom permission level called Site Owner that removes the ability to create subsites but keeps everything else, including the ability to edit ...
2
votes
1answer
397 views

Access to Default Landing Site without Access to Everything

I have a very basic SharePoint 2010 site collection that was set up as the default Team Site template. My goal is to have domain users be able to navigate to the main landing page of the site ...
2
votes
1answer
855 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
2
votes
4answers
4k views

Field-Level Security

Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
2
votes
1answer
449 views

Uploading files using object model

I'm experiencing some problems adding documents to a library using the object model. I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
2
votes
3answers
278 views

Deny user access from SharePoint Native but allow it from custom application

How can i restrict a user from entering SharePoint - unless he is using my custom application? For example, a user tries to open http://Mysite , he gets an access denied error. But as the same time, ...
2
votes
1answer
574 views

Security Exception - Trying to load MySite Blog

When I try to run this async query it fails: private void SomeFunction() { Thread thread = new Thread(GetBlogInfo); thread.Start(); } private void GetBlogInfo() { ...
2
votes
1answer
6k views

How to remove a permission to a SPPrincipal on a Item (programmatically)

I'm trying to work with privileges on elements of a list. I want the item to mantain the same privileges for all SPPrincipal I don't modify. This is the code public static void ...
2
votes
1answer
52 views

Blocking Access to Specific Sites For Certain Alternate Access Mappings

Ok, so I'm not sure that this is entirely possible, but wanted to pose the question: would it be possible to block access to certain content when the site is accessed from a certain alternate access ...
2
votes
1answer
73 views

Silverlight application privileges

I have a silverlight application which uses the client object model to access the sharepoint server. When i run the app "out-of-browser" with elevated trust everything works great, but when i try it ...
2
votes
1answer
234 views

Which accounts should be managed accounts?

Three questions on a theme... Which accounts should be managed accounts? Or perhaps to put it another way, which services / things are best to have as managed accounts? Or perhaps the opposite ...
2
votes
2answers
2k views

How to create a “datasheet-like” list view to update a checkbox in multiple rows?

I am using draft item security on a forms library to only allow the creator of a form and a user with "edit items" permissions to view a form in the library. I would like to provide the user with ...
2
votes
1answer
8k views

Target audience don't work

i turned on target audience for my list and in "Target Audience" column i have such value: ;;;;Portal Owners, Portal Members, Group1. I thought that this is enouf to prevent user to see list item, but ...
2
votes
4answers
1k views

What is a SharePoint Server Side File Hander?

The definition of the 'View Only' permissions level is as follows: Members of this group can view pages, list items, and documents. If the document has a server-side file handler available, ...
2
votes
0answers
44 views

SharePoint 2013 - Break inheritance subsite

i want to break the inheritance of a subsite. I know which button I have to press to solve this problem. But if I press this Button in the Ribbon UI in SharePoint, I cann not break the inheritance of ...
2
votes
1answer
16 views

Changing Permissions to a List Item Changes Permissions to the Entire List

I have a custom list in SP2010 where I need each item to be available only to the person who created it. A workflow like the one described in this article helped get that working. After an item is ...
2
votes
1answer
52 views

SharePoint 2016 On Premises - “Share Everything in this Folder even with unique permissions”

On Office 365 SharePoint there is the option to add another group to a Document Library and then there is a tick box for "Share Everything in this Folder even with unique permissions". Does anyone ...
2
votes
0answers
29 views

SQL usermapping for Farm-account: dbo vs itself

On my SharePoint farm (in SQL) the farm-account is sometimes mapped as user (itself) to a SharePoint database and sometimes the farm-account is mapped as dbo to a database. On all databases the ...
2
votes
3answers
64 views

Disable SPGroup in SharePoint 2013

I know we can create SPGroup and also delete it. But is it possible to disable it? I want this, because, I want to re-enable it later. I don't want to delete and re-create it, because, there could be ...
2
votes
0answers
266 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article. This method gets the ...
2
votes
0answers
36 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
2
votes
0answers
88 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
2
votes
0answers
3k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
2
votes
1answer
113 views

How to add security to a page using powershell

I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
2
votes
1answer
557 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
2
votes
0answers
119 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
2
votes
1answer
167 views

SSRS 2008 and SharePoint integrated mode - security flaw?

Here is my scenario: I've got SSRS 2008 R2 running in integrated mode with SharePoint 2010. Everything works as expected in that I can create data sources, models (either through studio or via the ...
2
votes
0answers
946 views

Page History/Page Permissions exceptions (BreakInheritance(false, false)) [closed]

I'm experiencing a serious problem (SharePoint 2010) I want to share with you. Steps to reproduce it: Create a Web application. Create a site collection inside the Web application previously ...
2
votes
5answers
5k views

SharePoint 2010: Disable / Hide references to SPSDisco.aspx

I asked this question originally on StackOverflow. I was referred here, so I'll repost: After upgrading some of our external websites running on SharePoint 2007 to 2010, we ran a link checker to ...
2
votes
4answers
2k views

SharePoint 2010 Insights (PerformancePoint): '401 Unauthorized' error on invoking 'Run Dashboard designer'

Environment: SharePoint 2010 on Windows 2008 R2 Standard + SQL Server 2008 R2 I am trying to setup the BI infrastructure Lab as outlined in this article: ...
1
vote
3answers
8k views

How to get user security group name through javascript

I use the following code in javascript to display name of logged in user. SP.SOD.executeFunc('sp.js', 'SP.ClientContext', getUserData); Is there a code that will also tell me security group of ...
1
vote
4answers
735 views

Quick Launch View - Problem

I have designed the quick launch for a SharePoint 2010 site in master page, Now for some pages I do not want the quick launch to show up, (Or better say some SharePoint groups). So I added a web ...
1
vote
2answers
1k views

Allow a specific file type to be rendered in iFrame

We've been looking at enabling the Permissive File Handling in Central Admin of our SharePoint 2010 on an intranet site collection. However, we're wondering if we can allow specific file types to be ...
1
vote
3answers
2k views

How to force the Word Automation Services Timer to run?

I need to run the Word Automation Services immediately after adding a job. My code is running in a workflow. Here is what I got so far : SPSecurity.RunWithElevatedPrivileges(delegate() { using ...
1
vote
2answers
921 views

Does breaking library/list security inheritance also break it's items inheritance?

We need to break inheritance on a document library. Some users of a site should have read only to document library 1 while some users should have contributor rights to document library 2 (both within ...
1
vote
3answers
220 views

List Security in Sharepoint

I need to set permissions for a list that looks like this: I have two different teams, each with a team lead and 3 team members. The team members should not see each others data. Team leaders have ...
1
vote
4answers
293 views

Anyone know of a good technical arch diagram or white paper article for SharePoint security?

Anyone know of a good technical arch diagram or white paper article focused SharePoint security? Mod's, I know this isn't a coding question so feel free to delete it if it violates the rules and I ...
1
vote
1answer
450 views

Why does the central admin requires to run in IE with elevated privileges?

As described here : http://blogs.msdn.com/b/jorman/archive/2010/07/10/missing-links-or-access-denied-in-central-admin-sharepoint-2010.aspx, I have to run with an elevated IE to get all actions. What ...
1
vote
2answers
45 views

spsecurity RunWithElevatedPrivileges

If you change the identity of the application pool, and the new account is not the System account, what account is used when calling SPSecurity.RunWithElevatedPrivileges?
1
vote
1answer
481 views

Get list items even if user does not have access to those items

Is there a way to get items from a list even if the current user does not actually have acces to them? SPSecurity.RunWithElevatedPrivileges does not seem to work! I have a special case in which I ...
1
vote
2answers
1k views

Dissappearing SharePoint Groups

SharePoint groups started to disappear- totally randomly, within a single site collection. I am pretty sure they are not deleted because we have few site collection admins with knowledge. like this: ...