Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
1answer
263 views

How to use versioning when using same .snk file for multiple SharePoint projects in the same solution?

I am trying to find the right way to set up my SharePoint solution with miltiple projects (in VS2012). In that, I am having difficulty understanding the concept of reusing the strong name key file. ...
1
vote
2answers
130 views

How to set a powershell variable to a specific sharepoint page

I have a SharePoint 2010 documents library that contains about 50 .aspx pages. I want to break inheritance on about 6 pages and set them to specific permissions. I am able to get a page by numerical ...
0
votes
2answers
1k views

SharePoint 2010 Top Link Inheritence and Permissions

We have an issue in SharePoint (Enterprise) 2010 with our Top Link NavBar inheritance and permissions across sub-sites. Current Configuration We have a root site collection: RSC1. Under the root ...
1
vote
3answers
5k views

How to get user security group name through javascript

I use the following code in javascript to display name of logged in user. SP.SOD.executeFunc('sp.js', 'SP.ClientContext', getUserData); Is there a code that will also tell me security group of ...
0
votes
1answer
1k views

Powershell and CredSSP in Production Environments

I try deploy Sharepoint WSP projects using PowerShell Remoting. See PowerShell Remoting Sharepoint 2010 Error Solution is configure CredSSP for Sharepoint. But Microsoft says: Caution: Credential ...
0
votes
2answers
72 views

Disabling direct access to list and library

I have a publishing site in which there are several lists and libraries. I am displaying some list and libraries on home page and applied XSLT on them to give them desired look and feel. There is a ...
1
vote
0answers
29 views

Fine-tuning SP2013 Document Library permissions

I have the need to give access to a role for creating documents and folders in a document library and giving access to another role to create documents (but not folders) How would I go about doing ...
0
votes
1answer
147 views

Access control on list items based on the item's value

How can I restrict permissions (read/write) on list items based on the item's value? For ( a simplistic) example, I have a list "Appraisals" which has two entries - Manager and Employee of type ...
1
vote
1answer
560 views

Powershell to add users to custom security groups - getting 0x80070005 error

The following powershell reads an xml file and adds users to custom SharePoint security groups. If ([bool](([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) ...
1
vote
1answer
57 views

Sharepoint Foundation 2010 Hardening

I have never hardened a SharePoint site before and I am having a hard time using all the recommendations I find online. This blog post discusses the different accounts that should be used for ...
1
vote
3answers
199 views

List Security in Sharepoint

I need to set permissions for a list that looks like this: I have two different teams, each with a team lead and 3 team members. The team members should not see each others data. Team leaders have ...
1
vote
0answers
112 views

FBA Custom login page to use 2 factor authentication - simplified

User provides an username/password. Should validate those and only then proceed to step 2. User provides an additional authentication token. If succeeds user is authenticated against SharePoint and ...
0
votes
1answer
430 views

How to give access programatically to a site

In my scenario we want to customize the access request page. We already know how to create an application page, and with a powershell command, instruct sharepoint to use that page instead. ...
1
vote
4answers
3k views

Modifying the current list item in a workflow

I have a workflow running when an item is adding to a document library. In this workflow, I have a code activity that I am attempting to set permissions to the list item. I am trying to break ...
0
votes
1answer
155 views

Limited Access permission being applied for a user at the root site

I have a list where security inheritance is not enabled. On adding an item to a list in the ItemAdded event receiver I'm applying custom security to the list item. The consequence of doing this is ...
2
votes
1answer
44 views

Audit the adminstrator

we are looking into the possibility of outsouring the administration of our farm. Because of the nature of sensitive data inside some of the site collection, we want to prevent data leakage. We want ...
2
votes
1answer
22 views

mandatory security group

trying to solve a permission issue. We have created a custom permission level called Site Owner that removes the ability to create subsites but keeps everything else, including the ability to edit ...
1
vote
3answers
38 views

Why can people change other people's items even though I set it up not to?

I have created a shared list where members can add new items and edit their own items. These members only have the ability to contribute, and not the ability to manage lists. In the list's advanced ...
0
votes
0answers
69 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...
2
votes
1answer
669 views

Make all sharepoint specific cookies non-persistent?

Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
7
votes
5answers
2k views

What is the difference between SPContext.Current.Web and SPContext.Current.Site.OpenWeb()?

My colleague found that some scenarios of working with SPWeb objects depend on how you obtain them. I'm not talking of impersonating with UserTokens - that another story. But at times when you write ...
1
vote
1answer
252 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
0answers
28 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
0
votes
1answer
363 views

Security Permissions broke while restoring the site on a new farm

I got a problem while restoring SP2010 sub-site from our old SP2010 farm to new farm through a full backup. The subsite on old farm had unique permissions. As well as the lists inside the sub-site ...
1
vote
2answers
628 views

How can I learn how to create a delegation engine? [closed]

One of the last places I worked at had a delegation engine in SharePoint, a SharePoint List that specified the SharePoint groups that would be sought for approval for a workflow based on that ...
0
votes
2answers
596 views

Using JavaScript to redirect a page

I am using JavaScript to redirect users who aren't owners to a different page. I am using $(document).ready(function() { //check owner status if(!isOwner) { ...
2
votes
3answers
1k views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
0
votes
1answer
108 views

Access all workflow tasks without being assigned to for validation

I have a request approval sequential workflow that has many tasks created upon approval. For each approval, Im using a custom webpart that shows different panels based on the status of the request. ...
1
vote
1answer
408 views

Approval Status is different given user's permissions. Visitors can see non-approved items

The approval status for blog post items is different given user's permission on a blog site. I had the Draft Item Security setting set to "Only users who can approve items (and the author of the ...
1
vote
2answers
257 views

SP_Admin SQL Permissions

I'm trying to create a web application using powershell and I'm getting a log in error with the SP_Admin account. I'm not sure if I've made a mistake when I was setting up the environment, I might ...
0
votes
1answer
44 views

Extended Web application

For my project I need to convert a Classic mode Authentication WebApplication (name Sharepoint - 8080) to Claims and add Forms Based Authentication to it. For that matter I extended the webapplication ...
1
vote
0answers
35 views

In SharePoint 2013 is there a security group that allows full access to all content in a farm by default?

I'm setting up a SharePoint 2013 development server and I've added my account to the Farm Admin group. In prior versions this meant that I had access to all content in the farm by default. It looks ...
0
votes
0answers
19 views

Security level on SP13

This is the scenario: I have a SP13 in which I'm deploying a File Server, so I created one web application and inside of it one Site Collection for each department. I give Full Control access to a ...
2
votes
1answer
298 views

Access to Default Landing Site without Access to Everything

I have a very basic SharePoint 2010 site collection that was set up as the default Team Site template. My goal is to have domain users be able to navigate to the main landing page of the site ...
1
vote
0answers
210 views

How to restrict access to edit attachments in lists?

We have Windows SharePoint Services 3.0 SP 3 (12.0.0.6608 from CA) on Windows 2003 Server R2 EE. In the main we use our WSS as sort of book of problems. And by book of problems, i mean that there is ...
0
votes
1answer
43 views

Hide Manager Permissions of Parent

In Document library, when clicking on Actions, users have "Manage Permissions of Parent" and "Edit Permissions". Is there a way to hide the 'Manage Permissions of Parent', as users are accidentally ...
0
votes
1answer
61 views

Creating a column that can only be modified by a group of people

I am creating a simple list (imagine a request for instance) in Sharepoint. This list can be modified by the user, but the field "Status" (Approved, rejected, waiting, -And any status I could imagine) ...
1
vote
1answer
113 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
0
votes
2answers
420 views

What is the correct way to add an AD group to an SP group with permissions?

So in Sharepoint there are 2 ways to see the groups, site settings, people and groups (I see my AD groups there twice), or site setttings permissions, I see the group there only once. All I need is ...
2
votes
1answer
641 views

What is neccesary to write to filesystem from a Web Part?

How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages. The SP2010 app pool is running ...
2
votes
2answers
452 views

Are “Security only” crawls kicked off automatically?

I know that if a user is added to a SharePoint group, a crawl needs to run before the ACLs are updated to reflect the new user's permissions. The question that my team is debating is whether or not ...
12
votes
3answers
14k views

Why are user permissions set in AD not updated immediately to SharePoint?

I have a SharePoint 2010 Foundation installation on Windows 2008 R2 and SQL Server 2008 and using Claims and Windows authentication. Subsites are visible only to members of a certain group. However, ...
5
votes
1answer
2k views

How do I remove all users from an SPGroup object?

I have an SPGroup object populated, how can I remove all members from the group, so that essentially I start with a fresh group. I can't delete and recreate it, so I need a way to work with the ...
1
vote
1answer
1k views

Call SharePoint custom WCF service from within same SharePoint site

I've built a custom WCF web service that is hosted on a SharePoint server. The service combined SharePoint data with data from a separate database. The service can successfully be called from a ...
0
votes
1answer
530 views

Security is not working after migration to SP2013

We have migrated site from MOSS to Sharepoint 2013 by using OOTB Export\Import APIs. Everything is working fine apart from user security. I can see that all the users are migrated to the destination ...
4
votes
4answers
4k views

Why is SharePoint_Shell_Access permission required to run SharePoint powershell?

So we're setting up a SharePoint farm and it seems our admin accounts require access SharePoint_Shell_Access role on SQL. http://technet.microsoft.com/en-us/library/ee806878.aspx ...
1
vote
2answers
283 views

SID and other fields added to user information list?

According to stuff I am reading on the web, when an AD user gets added to SharePoint site the following information will get copied from AD to the user information list: Display name Login name ...
0
votes
1answer
200 views

How to assign permissions to a single publishing page

As I know that a publishing page is a securable object, and in my case I need to grant certain users the permissions to Read certain pages in my publishing site (they cannot read other pages), in ...
2
votes
1answer
380 views

Accessing data from another web application throws an SQLInvalidException

The scenario is: A MySiteHost site collection (example name: MY SITE). Web application's application pool account is spmysite. A TeamSite site collection (example name: TEAM SITE). Web application's ...
1
vote
1answer
294 views

Site Collection Administrators permissions level?

I tried to answer this one via Google but the answers seem quite conflicting. I was wondering if anybody knows this answer definitively, or can reference any Microsoft documentation (I couldn't find ...