Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
0answers
35 views

In SharePoint 2013 is there a security group that allows full access to all content in a farm by default?

I'm setting up a SharePoint 2013 development server and I've added my account to the Farm Admin group. In prior versions this meant that I had access to all content in the farm by default. It looks ...
0
votes
0answers
17 views

Security level on SP13

This is the scenario: I have a SP13 in which I'm deploying a File Server, so I created one web application and inside of it one Site Collection for each department. I give Full Control access to a ...
2
votes
1answer
241 views

Access to Default Landing Site without Access to Everything

I have a very basic SharePoint 2010 site collection that was set up as the default Team Site template. My goal is to have domain users be able to navigate to the main landing page of the site ...
1
vote
0answers
180 views

How to restrict access to edit attachments in lists?

We have Windows SharePoint Services 3.0 SP 3 (12.0.0.6608 from CA) on Windows 2003 Server R2 EE. In the main we use our WSS as sort of book of problems. And by book of problems, i mean that there is ...
0
votes
1answer
41 views

Hide Manager Permissions of Parent

In Document library, when clicking on Actions, users have "Manage Permissions of Parent" and "Edit Permissions". Is there a way to hide the 'Manage Permissions of Parent', as users are accidentally ...
0
votes
1answer
55 views

Creating a column that can only be modified by a group of people

I am creating a simple list (imagine a request for instance) in Sharepoint. This list can be modified by the user, but the field "Status" (Approved, rejected, waiting, -And any status I could imagine) ...
1
vote
1answer
96 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
0
votes
2answers
348 views

What is the correct way to add an AD group to an SP group with permissions?

So in Sharepoint there are 2 ways to see the groups, site settings, people and groups (I see my AD groups there twice), or site setttings permissions, I see the group there only once. All I need is ...
2
votes
1answer
588 views

What is neccesary to write to filesystem from a Web Part?

How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages. The SP2010 app pool is running ...
1
vote
2answers
326 views

Are “Security only” crawls kicked off automatically?

I know that if a user is added to a SharePoint group, a crawl needs to run before the ACLs are updated to reflect the new user's permissions. The question that my team is debating is whether or not ...
8
votes
3answers
11k views

Why are user permissions set in AD not updated immediately to SharePoint?

I have a SharePoint 2010 Foundation installation on Windows 2008 R2 and SQL Server 2008 and using Claims and Windows authentication. Subsites are visible only to members of a certain group. However, ...
4
votes
1answer
2k views

How do I remove all users from an SPGroup object?

I have an SPGroup object populated, how can I remove all members from the group, so that essentially I start with a fresh group. I can't delete and recreate it, so I need a way to work with the ...
1
vote
1answer
929 views

Call SharePoint custom WCF service from within same SharePoint site

I've built a custom WCF web service that is hosted on a SharePoint server. The service combined SharePoint data with data from a separate database. The service can successfully be called from a ...
0
votes
1answer
415 views

Security is not working after migration to SP2013

We have migrated site from MOSS to Sharepoint 2013 by using OOTB Export\Import APIs. Everything is working fine apart from user security. I can see that all the users are migrated to the destination ...
4
votes
4answers
4k views

Why is SharePoint_Shell_Access permission required to run SharePoint powershell?

So we're setting up a SharePoint farm and it seems our admin accounts require access SharePoint_Shell_Access role on SQL. http://technet.microsoft.com/en-us/library/ee806878.aspx ...
1
vote
2answers
244 views

SID and other fields added to user information list?

According to stuff I am reading on the web, when an AD user gets added to SharePoint site the following information will get copied from AD to the user information list: Display name Login name ...
0
votes
1answer
140 views

How to assign permissions to a single publishing page

As I know that a publishing page is a securable object, and in my case I need to grant certain users the permissions to Read certain pages in my publishing site (they cannot read other pages), in ...
2
votes
1answer
268 views

Accessing data from another web application throws an SQLInvalidException

The scenario is: A MySiteHost site collection (example name: MY SITE). Web application's application pool account is spmysite. A TeamSite site collection (example name: TEAM SITE). Web application's ...
1
vote
1answer
244 views

Site Collection Administrators permissions level?

I tried to answer this one via Google but the answers seem quite conflicting. I was wondering if anybody knows this answer definitively, or can reference any Microsoft documentation (I couldn't find ...
0
votes
1answer
53 views

Securing files in a library by a people column?

SharePoint Online 2013. Library with a people column added. For the site owner, they can add files at will, but must select a person for that column for every file. But for library members, we ...
0
votes
3answers
294 views

Denying the manage rights permission

I'm trying to fullfill a requirement which forces the use of Active Directory groups. I'm having issues getting to where I want to be. Upon creation of a new site, I'm going to use AD groups to ...
0
votes
1answer
26 views

Permissions needed by System security officer

In our current setup. I am responsible for Sharepoint in our company. This means that I do everything from deploying to application support to giving users rights to the platform when it is required. ...
-1
votes
1answer
33 views

security concerns on sharepoint deployment [closed]

I've inherited our company's SP 2010 deployment. I'm looking for security flaws and other potential issues. Any suggestions as to what to look for?
0
votes
2answers
3k views

Risks of using Permissive vs. Strict for Browser File Handling

We have some web sites in our SharePoint 2010 site collection that need to display SWF files (to play FLV videos). For SharePoint to render the videos, we go to the web application in Central Admin > ...
1
vote
0answers
25 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...
5
votes
5answers
3k views

User Accounts Disappearing From SP Groups

We've been running into a bizarre scenario and I'm at a complete loss. I'm a site collection admin for my division's portal. We're on a shared internal company-wide MOSS server, and I have no access ...
0
votes
1answer
63 views

Need extra layer of authentication on SharePoint list

The following below was requested in an effort to eliminate any security isses. (We are currently using the default NTLM authentication): -Create a hidden URL extention for admin's only (new site ...
2
votes
1answer
333 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
1
vote
1answer
3k views

“DWORD (32-bit) Value” or “”Qword (32-bit) Value" - which one should I configure in Windows 64-bit registry?

"DisableLoopbackCheck & SharePoint: What every admin and developer should know" advises to disable ("infamous") "loopback check" completely on dev machine by following "You receive error 401.1 ...
0
votes
1answer
59 views

Service account to access UNC

I'm trying to access the UNC to copy a file from the UNC share to another location. The way it is set up it requires an interactive challenge for credentials, and I was told there is no way to change ...
0
votes
1answer
68 views

SecurityException on list GetItems

I'm using custom list event receiver on SharePoint Online to process some field in the item. In the Event Receiver, I use a query to another list to retrieve value from that list in to current item. ...
0
votes
2answers
302 views

How to exclude users from view access?

We have a SharePoint 2007 site that is viewable by "All Authenticated Users". As part of company policy, when an employee is terminated or leaves, we modify their active directory account to remain ...
1
vote
1answer
64 views

o365 A2 safe bet for our SharePoint 2013 production farm?

While we build our on-prem SP 2013 we are playing with free o365 A2. We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users. Maybe 500 users using ...
1
vote
1answer
76 views

How to secure SharePoint content

I can navigate to following path and access SharePoint content easily. \\servername@portno\DavWWWRoot\DocLibraryName How to prevent others from accessing this path?
0
votes
1answer
698 views

SharePoint Permissions not working

I am using SharePoint 2010. When I set permissions (I Only grand myself access) on a document library or folder or document EVERYONE can still see it and download the documents. Why is that? What is ...
0
votes
1answer
107 views

SharePoint 2013 Site Collection Move Owner to Group

I am in process of migrating our WSS 3.0 installation to 2013 and I am at the point where I need to break the single site collection down into more manageable sizes and I have a script that ...
0
votes
1answer
874 views

Sharepoint 2010 users strangely removed from Sharepoint Group (Expert Advise required)

Since 3 months client portal was working fine suddenly due to some network problem we restarted SharePoint server, after that some Active directory users complained system was inaccessible, where ...
2
votes
1answer
108 views

RoleAssigments are being assigned by default to all new pages

I am pretty new to SharePoint, so please let me know if there is some more info or clarification required. I am creating a webapplication with certain SP groups, libraries and pages in that order by ...
2
votes
2answers
2k views

How to set authentication model to allow cross-domain access?

How do I change the security settings to allow cross-domain on the same web-server? I have multiple instance or site collections on the same server but want to make sure that web-services to ...
1
vote
2answers
616 views

Is it possible to add a security trim that filters by user groups?

In my left hand side bar I have 3 links to downloads- one for each of three different companies. I need each company to log in and see only the one link to their companies downloads - not all 3 links ...
2
votes
1answer
436 views

Uploading files using object model

I'm experiencing some problems adding documents to a library using the object model. I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
0
votes
0answers
86 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
1
vote
1answer
317 views

Audit log a specific user (or: Monitor the admin)

Is it possible to audit log only specific users (thus keeping the Audit-log under control and not harming performance)? Background Sitecolletion admins can view and edit everything (de facto SP ...
2
votes
5answers
2k views

Allow users to view items in Document Library, but not open the files

I have the requirement to allow users to view the content of a document library, including browsing through folders, but not actually open the individual files. There doesn't appear to be a ...
0
votes
1answer
76 views

How to show what level of permission a group or user has to a site?

In SharePoint 2007 when you go to a site and view advanced permissions (Site Actions - Site Settings - Modify All Site Settings - Advanced Permissions) you are presented with a page that has a table ...
0
votes
2answers
53 views

Capture SharePoint role group and group members?

For our audit process I need to regularly capture all of our SharePoint role groups (for our main site collection) and the members in each group. Is there a reliable way to approach this problem?
0
votes
1answer
39 views

Frequently Needed Business Rule About Security that SharePoint Does Not Provide OOTB

Suppose that i have two lists like this REGION_LIST [ RegionName(text), RegionResponsibles(multi-select peoplepicker) ] ISSUES_LIST [Some issue related columns, Region(lookup) ] Main requirement is ...
1
vote
1answer
82 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
1
vote
0answers
323 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
0
votes
1answer
150 views

Site collection administrators / owners question

I'm stuggling over a somewhat architectural question which concerns site collection admins and owners. To begin with, I found the thread answerd by Per Jakobsen (here Site collection owners and site ...