Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
1answer
208 views

I want a literal 'Read/view Only' library - no save, download or print functionality. Is this possible?

I have a number of documents that I want to be literally 'Read Only' in a Library (ideally view in the browser). This means that I want to disable the 'Save As', download and print functionality to ...
1
vote
0answers
23 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...
5
votes
5answers
2k views

User Accounts Disappearing From SP Groups

We've been running into a bizarre scenario and I'm at a complete loss. I'm a site collection admin for my division's portal. We're on a shared internal company-wide MOSS server, and I have no access ...
0
votes
1answer
58 views

Need extra layer of authentication on SharePoint list

The following below was requested in an effort to eliminate any security isses. (We are currently using the default NTLM authentication): -Create a hidden URL extention for admin's only (new site ...
2
votes
1answer
170 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
1
vote
1answer
2k views

“DWORD (32-bit) Value” or “”Qword (32-bit) Value" - which one should I configure in Windows 64-bit registry?

"DisableLoopbackCheck & SharePoint: What every admin and developer should know" advises to disable ("infamous") "loopback check" completely on dev machine by following "You receive error 401.1 ...
2
votes
0answers
1k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
0
votes
1answer
54 views

Service account to access UNC

I'm trying to access the UNC to copy a file from the UNC share to another location. The way it is set up it requires an interactive challenge for credentials, and I was told there is no way to change ...
0
votes
1answer
65 views

SecurityException on list GetItems

I'm using custom list event receiver on SharePoint Online to process some field in the item. In the Event Receiver, I use a query to another list to retrieve value from that list in to current item. ...
0
votes
2answers
223 views

How to exclude users from view access?

We have a SharePoint 2007 site that is viewable by "All Authenticated Users". As part of company policy, when an employee is terminated or leaves, we modify their active directory account to remain ...
1
vote
1answer
60 views

o365 A2 safe bet for our SharePoint 2013 production farm?

While we build our on-prem SP 2013 we are playing with free o365 A2. We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users. Maybe 500 users using ...
1
vote
1answer
67 views

How to secure SharePoint content

I can navigate to following path and access SharePoint content easily. \\servername@portno\DavWWWRoot\DocLibraryName How to prevent others from accessing this path?
0
votes
1answer
558 views

SharePoint Permissions not working

I am using SharePoint 2010. When I set permissions (I Only grand myself access) on a document library or folder or document EVERYONE can still see it and download the documents. Why is that? What is ...
0
votes
1answer
92 views

SharePoint 2013 Site Collection Move Owner to Group

I am in process of migrating our WSS 3.0 installation to 2013 and I am at the point where I need to break the single site collection down into more manageable sizes and I have a script that ...
0
votes
1answer
729 views

Sharepoint 2010 users strangely removed from Sharepoint Group (Expert Advise required)

Since 3 months client portal was working fine suddenly due to some network problem we restarted SharePoint server, after that some Active directory users complained system was inaccessible, where ...
2
votes
1answer
103 views

RoleAssigments are being assigned by default to all new pages

I am pretty new to SharePoint, so please let me know if there is some more info or clarification required. I am creating a webapplication with certain SP groups, libraries and pages in that order by ...
2
votes
2answers
1k views

How to set authentication model to allow cross-domain access?

How do I change the security settings to allow cross-domain on the same web-server? I have multiple instance or site collections on the same server but want to make sure that web-services to ...
0
votes
2answers
536 views

Is it possible to add a security trim that filters by user groups?

In my left hand side bar I have 3 links to downloads- one for each of three different companies. I need each company to log in and see only the one link to their companies downloads - not all 3 links ...
2
votes
1answer
430 views

Uploading files using object model

I'm experiencing some problems adding documents to a library using the object model. I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
0
votes
0answers
77 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
1
vote
1answer
236 views

Audit log a specific user (or: Monitor the admin)

Is it possible to audit log only specific users (thus keeping the Audit-log under control and not harming performance)? Background Sitecolletion admins can view and edit everything (de facto SP ...
2
votes
5answers
2k views

Allow users to view items in Document Library, but not open the files

I have the requirement to allow users to view the content of a document library, including browsing through folders, but not actually open the individual files. There doesn't appear to be a ...
0
votes
1answer
73 views

How to show what level of permission a group or user has to a site?

In SharePoint 2007 when you go to a site and view advanced permissions (Site Actions - Site Settings - Modify All Site Settings - Advanced Permissions) you are presented with a page that has a table ...
0
votes
2answers
53 views

Capture SharePoint role group and group members?

For our audit process I need to regularly capture all of our SharePoint role groups (for our main site collection) and the members in each group. Is there a reliable way to approach this problem?
0
votes
1answer
39 views

Frequently Needed Business Rule About Security that SharePoint Does Not Provide OOTB

Suppose that i have two lists like this REGION_LIST [ RegionName(text), RegionResponsibles(multi-select peoplepicker) ] ISSUES_LIST [Some issue related columns, Region(lookup) ] Main requirement is ...
1
vote
1answer
76 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
1
vote
0answers
260 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
0
votes
1answer
139 views

Site collection administrators / owners question

I'm stuggling over a somewhat architectural question which concerns site collection admins and owners. To begin with, I found the thread answerd by Per Jakobsen (here Site collection owners and site ...
0
votes
2answers
232 views

How to prevent users from getting at the source files for Excel Web Services

I have a request to put a large Excel dataset on a MOSS 2007 sharepoint page. The XLSX is about 13 MB in values alone - about 50,000 rows. It's updated weekly, usually in batch form (i.e. some ...
2
votes
1answer
73 views

How to add security to a page using powershell

I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
0
votes
1answer
43 views

giving access to an entire web application

Im trying to elevate someones permissions so that they can edit and add users etc across all site collections in our farm. I added the user into the farm admins group but it doesnt look like their ...
1
vote
2answers
578 views

Best Practices to make my internet facing portal secure

Ok, so I finished developing my internet site. It uses a federation provider to authenticate public user. Now what I'm concern of, is the site security. I see that any logged in user can see the ...
1
vote
2answers
593 views

I need a Antivirus Scanner for SharePoint 2013

I'm using a Windows 2012 server. With SharePoint server 2013 installed. When I wanted to install Forefront for SharePoint 2010 I get this error. No protectable server applications were detected. ...
0
votes
1answer
84 views

Is there a way to limit viewing permissions of list items based on a property?

I have a custom list which has a property "Department" which is a multi-select checkbox list. So each item in this list can be one of multiple different Departments. I would like to make these items ...
1
vote
0answers
216 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
0
votes
1answer
65 views

Conditional SPSecurity.RunWithElevatedPrivileges

Is there a way to use SPSecurity.RunWithElevatedPrivileges conditionally. For example, assume that i have a code block, if some condition is met i want to run this code block in ...
0
votes
1answer
181 views

My Site creation failure for user after moving My Sites to dedicated web application

I have created a new web application at port 8080 with the intention of having all personal site creation (i.e. My Sites) stored in a dedicated WSS_Content database (i.e. a best practice ...
0
votes
1answer
52 views

SP2010, are the search index / query component files a risk for highly secure documentation?

Say I have some secure documentation held in SharePoint. Now say the SQL database/BLOB location is encrypted. Enterprise Search is used to crawl this content and therefore the content is indexed. Is ...
3
votes
3answers
2k views

Multiple login prompts are driving users nuts

What are the typical causes of multiple login prompts on sharepoint sites? We have a production site where users who login outside of the domain (from home) are prompted multiple times (3 or so ...
0
votes
1answer
40 views

Accessing word docs on Sharepoint site. Are files cached locally?

My client wants users to access word and excel docs through the company SharePoint site from remote locations, however he does not want them to have access to the files after they have logged off the ...
0
votes
2answers
65 views

Full Control Permission Problem

I am in a group which has Full Permission (site collection owners). However i cant add users to groups that i am not a member off. I thought this would give me full overriding permissions. Am i ...
1
vote
1answer
832 views

How can I add “All Authenticated users” (FBA) to a SharePoint Group using Powershell?

I have an FBA site and I need to add "all authenticated users" to a group using PowerShell. How can I do that?
4
votes
1answer
5k views

Unable to evaluate expression because the code is optimized or a native frame is on top of the call stack

this code thow an exception at "Item.Update();" private void AddEmail() { site = SPContext.Current.Site; web = site.RootWeb; ...
1
vote
1answer
460 views

Get Access to List View webpart without having access to list

So I'm developing an event management system at the moment where there are two user groups, "editors" and "attendees". By registering for an event, the SPUser is added to a list "attendeeList" which ...
4
votes
1answer
249 views

users with Contribute getting 403 forbidden error

This is something I haven't seen in 4 years. Users in SP Group "Accounting" with Contribute access getting 403b forbidden error. It was working fine until this morning. However, I log in as sp admin ...
1
vote
0answers
95 views

Why is AddComment on SocialCommentManager throwing SPException?

When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying "The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
1answer
202 views

SharePoint 2013 S2S Configuration with Exchange

I am trying to configure Site Mailboxes and eDiscovery between SharePoint 2013 and Exchange 2013. The guidance on both of these is pretty much the same, create a server to server trust, then grant ...
1
vote
1answer
624 views

Security For Custom Application Pages

When managing security for any control on a page we use SPSecurityTrimmedControl. But what to do when defining permissions for a custom application page? How do we restrict unauthorized people to ...
0
votes
1answer
31 views

Maintaining role groups and users in two farms simultaneously?

We currently have two farms - a SharePoint 2007 one and a SharePoint 2010 one. We have the same groups in both farms and the same userbase. At the moment when someone joins or leaves the company ...
0
votes
1answer
88 views

Is there a way to list all content deployment jobs on aspx page?

Is there any way to get all local contentdeployment jobs from within web application code? I'm trying to list all jobs on an aspx page in the backend of a site collection, but everytime I execute ...