Security is the protection of information and property from theft.

learn more… | top users | synonyms

2
votes
2answers
19 views

What's the purpose of deny all anonymous policy

When we configure anonymous policy for a web application, there is an option for "deny all". Why is that? We can just disable anonymous access, right? Why would we enable anonymous access and use a ...
2
votes
2answers
6k views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
2
votes
1answer
23 views

mandatory security group

trying to solve a permission issue. We have created a custom permission level called Site Owner that removes the ability to create subsites but keeps everything else, including the ability to edit ...
2
votes
1answer
376 views

Access to Default Landing Site without Access to Everything

I have a very basic SharePoint 2010 site collection that was set up as the default Team Site template. My goal is to have domain users be able to navigate to the main landing page of the site ...
2
votes
1answer
745 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
2
votes
4answers
4k views

Field-Level Security

Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
2
votes
1answer
446 views

Uploading files using object model

I'm experiencing some problems adding documents to a library using the object model. I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
2
votes
3answers
277 views

Deny user access from SharePoint Native but allow it from custom application

How can i restrict a user from entering SharePoint - unless he is using my custom application? For example, a user tries to open http://Mysite , he gets an access denied error. But as the same time, ...
2
votes
1answer
557 views

Security Exception - Trying to load MySite Blog

When I try to run this async query it fails: private void SomeFunction() { Thread thread = new Thread(GetBlogInfo); thread.Start(); } private void GetBlogInfo() { ...
2
votes
1answer
6k views

How to remove a permission to a SPPrincipal on a Item (programmatically)

I'm trying to work with privileges on elements of a list. I want the item to mantain the same privileges for all SPPrincipal I don't modify. This is the code public static void ...
2
votes
1answer
52 views

Blocking Access to Specific Sites For Certain Alternate Access Mappings

Ok, so I'm not sure that this is entirely possible, but wanted to pose the question: would it be possible to block access to certain content when the site is accessed from a certain alternate access ...
2
votes
1answer
73 views

Silverlight application privileges

I have a silverlight application which uses the client object model to access the sharepoint server. When i run the app "out-of-browser" with elevated trust everything works great, but when i try it ...
2
votes
1answer
233 views

Which accounts should be managed accounts?

Three questions on a theme... Which accounts should be managed accounts? Or perhaps to put it another way, which services / things are best to have as managed accounts? Or perhaps the opposite ...
2
votes
2answers
2k views

How to create a “datasheet-like” list view to update a checkbox in multiple rows?

I am using draft item security on a forms library to only allow the creator of a form and a user with "edit items" permissions to view a form in the library. I would like to provide the user with ...
2
votes
1answer
8k views

Target audience don't work

i turned on target audience for my list and in "Target Audience" column i have such value: ;;;;Portal Owners, Portal Members, Group1. I thought that this is enouf to prevent user to see list item, but ...
2
votes
4answers
1k views

What is a SharePoint Server Side File Hander?

The definition of the 'View Only' permissions level is as follows: Members of this group can view pages, list items, and documents. If the document has a server-side file handler available, ...
2
votes
1answer
29 views

SharePoint 2016 On Premises - “Share Everything in this Folder even with unique permissions”

On Office 365 SharePoint there is the option to add another group to a Document Library and then there is a tick box for "Share Everything in this Folder even with unique permissions". Does anyone ...
2
votes
3answers
45 views

Disable SPGroup in SharePoint 2013

I know we can create SPGroup and also delete it. But is it possible to disable it? I want this, because, I want to re-enable it later. I don't want to delete and re-create it, because, there could be ...
2
votes
1answer
427 views

SharePoint won’t report active directory domain user permissions inherited from active directory domain security groups nested in SharePoint groups?

For instance: ads\mdepnorm aka MDEP TSST Norman Testing is in SP-CONTRIBUTORS ADS security group: . The sp-contributors ADS group is in SharePoint group Intranet Members: . It follows that if I ...
2
votes
0answers
240 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article. This method gets the ...
2
votes
0answers
34 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
2
votes
0answers
82 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
2
votes
0answers
2k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
2
votes
1answer
102 views

How to add security to a page using powershell

I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
2
votes
1answer
466 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
2
votes
0answers
117 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
2
votes
1answer
162 views

SSRS 2008 and SharePoint integrated mode - security flaw?

Here is my scenario: I've got SSRS 2008 R2 running in integrated mode with SharePoint 2010. Everything works as expected in that I can create data sources, models (either through studio or via the ...
2
votes
0answers
935 views

Page History/Page Permissions exceptions (BreakInheritance(false, false)) [closed]

I'm experiencing a serious problem (SharePoint 2010) I want to share with you. Steps to reproduce it: Create a Web application. Create a site collection inside the Web application previously ...
2
votes
5answers
5k views

SharePoint 2010: Disable / Hide references to SPSDisco.aspx

I asked this question originally on StackOverflow. I was referred here, so I'll repost: After upgrading some of our external websites running on SharePoint 2007 to 2010, we ran a link checker to ...
2
votes
4answers
2k views

SharePoint 2010 Insights (PerformancePoint): '401 Unauthorized' error on invoking 'Run Dashboard designer'

Environment: SharePoint 2010 on Windows 2008 R2 Standard + SQL Server 2008 R2 I am trying to setup the BI infrastructure Lab as outlined in this article: ...
1
vote
1answer
8k views

jQuery SP.JS objects to test if current SharePoint user has full control / owner rigths?

As an example, the below jQuery displays current SharePoint user title. Excellent! :) Is it possible to use the sp.js objects to test If the current user has Full Control on the current page or ...
1
vote
3answers
7k views

How to get user security group name through javascript

I use the following code in javascript to display name of logged in user. SP.SOD.executeFunc('sp.js', 'SP.ClientContext', getUserData); Is there a code that will also tell me security group of ...
1
vote
4answers
727 views

Quick Launch View - Problem

I have designed the quick launch for a SharePoint 2010 site in master page, Now for some pages I do not want the quick launch to show up, (Or better say some SharePoint groups). So I added a web ...
1
vote
2answers
1k views

Allow a specific file type to be rendered in iFrame

We've been looking at enabling the Permissive File Handling in Central Admin of our SharePoint 2010 on an intranet site collection. However, we're wondering if we can allow specific file types to be ...
1
vote
3answers
2k views

How to force the Word Automation Services Timer to run?

I need to run the Word Automation Services immediately after adding a job. My code is running in a workflow. Here is what I got so far : SPSecurity.RunWithElevatedPrivileges(delegate() { using ...
1
vote
2answers
902 views

Does breaking library/list security inheritance also break it's items inheritance?

We need to break inheritance on a document library. Some users of a site should have read only to document library 1 while some users should have contributor rights to document library 2 (both within ...
1
vote
3answers
219 views

List Security in Sharepoint

I need to set permissions for a list that looks like this: I have two different teams, each with a team lead and 3 team members. The team members should not see each others data. Team leaders have ...
1
vote
4answers
293 views

Anyone know of a good technical arch diagram or white paper article for SharePoint security?

Anyone know of a good technical arch diagram or white paper article focused SharePoint security? Mod's, I know this isn't a coding question so feel free to delete it if it violates the rules and I ...
1
vote
1answer
439 views

Why does the central admin requires to run in IE with elevated privileges?

As described here : http://blogs.msdn.com/b/jorman/archive/2010/07/10/missing-links-or-access-denied-in-central-admin-sharepoint-2010.aspx, I have to run with an elevated IE to get all actions. What ...
1
vote
1answer
467 views

Get list items even if user does not have access to those items

Is there a way to get items from a list even if the current user does not actually have acces to them? SPSecurity.RunWithElevatedPrivileges does not seem to work! I have a special case in which I ...
1
vote
2answers
987 views

Dissappearing SharePoint Groups

SharePoint groups started to disappear- totally randomly, within a single site collection. I am pretty sure they are not deleted because we have few site collection admins with knowledge. like this: ...
1
vote
3answers
2k views

Encrypt SSN column in a list

I need to encrypt social security column in a list. What are my options? ps: Did not find Encryption in the Tags. Actually, looking for something like this (Column Level Security, but non ...
1
vote
2answers
2k views

View PDFs in web browser

When I go to view a PDF on the web, say a 1040 form at the IRS, when I open it it opens in my browser. When I open a PDF file from my sharepoint 2010 instance, however, it prompts me to download the ...
1
vote
3answers
489 views

Access Denied on Web Part

I followed this article to display sub-sites on site collection's home page. I works fine when user have contribute access. But user with read or view only gets Access Denied. What are my options so I ...
1
vote
1answer
1k views

Reason for FormDigestSettings.Enabled?

I am using SharePoint Server 2007 Enterprise with Windows Server 2008 Enterprise. I have deployed a publishing portal. I am developing a ASP.Net web application using VSTS 2008 + C# + .Net 3.5 + ...
1
vote
3answers
8k views

People Picker and fltering by certain AD Groups

I have a scenario where a client wants to filter in the People Picker what AD Groups are available to choose from. For instance, when selecting what AD User/AD Group can be added to an Alert on a ...
1
vote
3answers
53 views

Allow only certain users access to a site

Is there a way to restrict, for example, an AD group access to a specific site out of the box? For example, I want to restrict access to users to Site A who are not US citizens. Is there a way OOTB or ...
1
vote
1answer
770 views

Powershell to add users to custom security groups - getting 0x80070005 error

The following powershell reads an xml file and adds users to custom SharePoint security groups. If ([bool](([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) ...
1
vote
1answer
332 views

Site Collection Administrators permissions level?

I tried to answer this one via Google but the answers seem quite conflicting. I was wondering if anybody knows this answer definitively, or can reference any Microsoft documentation (I couldn't find ...
1
vote
2answers
621 views

How to exclude users from view access?

We have a SharePoint 2007 site that is viewable by "All Authenticated Users". As part of company policy, when an employee is terminated or leaves, we modify their active directory account to remain ...