Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
1answer
63 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
1
vote
0answers
215 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
0
votes
1answer
129 views

Site collection administrators / owners question

I'm stuggling over a somewhat architectural question which concerns site collection admins and owners. To begin with, I found the thread answerd by Per Jakobsen (here Site collection owners and site ...
0
votes
2answers
207 views

How to prevent users from getting at the source files for Excel Web Services

I have a request to put a large Excel dataset on a MOSS 2007 sharepoint page. The XLSX is about 13 MB in values alone - about 50,000 rows. It's updated weekly, usually in batch form (i.e. some ...
2
votes
1answer
71 views

How to add security to a page using powershell

I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
0
votes
1answer
42 views

giving access to an entire web application

Im trying to elevate someones permissions so that they can edit and add users etc across all site collections in our farm. I added the user into the farm admins group but it doesnt look like their ...
1
vote
2answers
449 views

Best Practices to make my internet facing portal secure

Ok, so I finished developing my internet site. It uses a federation provider to authenticate public user. Now what I'm concern of, is the site security. I see that any logged in user can see the ...
1
vote
2answers
564 views

I need a Antivirus Scanner for SharePoint 2013

I'm using a Windows 2012 server. With SharePoint server 2013 installed. When I wanted to install Forefront for SharePoint 2010 I get this error. No protectable server applications were detected. ...
0
votes
1answer
73 views

Is there a way to limit viewing permissions of list items based on a property?

I have a custom list which has a property "Department" which is a multi-select checkbox list. So each item in this list can be one of multiple different Departments. I would like to make these items ...
1
vote
0answers
175 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
0
votes
1answer
62 views

Conditional SPSecurity.RunWithElevatedPrivileges

Is there a way to use SPSecurity.RunWithElevatedPrivileges conditionally. For example, assume that i have a code block, if some condition is met i want to run this code block in ...
0
votes
1answer
104 views

My Site creation failure for user after moving My Sites to dedicated web application

I have created a new web application at port 8080 with the intention of having all personal site creation (i.e. My Sites) stored in a dedicated WSS_Content database (i.e. a best practice ...
0
votes
1answer
45 views

SP2010, are the search index / query component files a risk for highly secure documentation?

Say I have some secure documentation held in SharePoint. Now say the SQL database/BLOB location is encrypted. Enterprise Search is used to crawl this content and therefore the content is indexed. Is ...
3
votes
3answers
1k views

Multiple login prompts are driving users nuts

What are the typical causes of multiple login prompts on sharepoint sites? We have a production site where users who login outside of the domain (from home) are prompted multiple times (3 or so ...
0
votes
1answer
40 views

Accessing word docs on Sharepoint site. Are files cached locally?

My client wants users to access word and excel docs through the company SharePoint site from remote locations, however he does not want them to have access to the files after they have logged off the ...
0
votes
2answers
60 views

Full Control Permission Problem

I am in a group which has Full Permission (site collection owners). However i cant add users to groups that i am not a member off. I thought this would give me full overriding permissions. Am i ...
1
vote
1answer
627 views

How can I add “All Authenticated users” (FBA) to a SharePoint Group using Powershell?

I have an FBA site and I need to add "all authenticated users" to a group using PowerShell. How can I do that?
4
votes
1answer
4k views

Unable to evaluate expression because the code is optimized or a native frame is on top of the call stack

this code thow an exception at "Item.Update();" private void AddEmail() { site = SPContext.Current.Site; web = site.RootWeb; ...
1
vote
1answer
382 views

Get Access to List View webpart without having access to list

So I'm developing an event management system at the moment where there are two user groups, "editors" and "attendees". By registering for an event, the SPUser is added to a list "attendeeList" which ...
4
votes
1answer
247 views

users with Contribute getting 403 forbidden error

This is something I haven't seen in 4 years. Users in SP Group "Accounting" with Contribute access getting 403b forbidden error. It was working fine until this morning. However, I log in as sp admin ...
1
vote
1answer
260 views

SPUtility.GetPrincipalsInGroup not working when claims authentication is enabled

Method SPUtility.GetPrincipalsInGroup can be used to resolve users that belongs to a AD Group. However, when claims authentication is enabled, this method doesn't work as expected. Is there another ...
1
vote
0answers
85 views

Why is AddComment on SocialCommentManager throwing SPException?

When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying "The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
1answer
186 views

SharePoint 2013 S2S Configuration with Exchange

I am trying to configure Site Mailboxes and eDiscovery between SharePoint 2013 and Exchange 2013. The guidance on both of these is pretty much the same, create a server to server trust, then grant ...
1
vote
1answer
446 views

Security For Custom Application Pages

When managing security for any control on a page we use SPSecurityTrimmedControl. But what to do when defining permissions for a custom application page? How do we restrict unauthorized people to ...
0
votes
1answer
31 views

Maintaining role groups and users in two farms simultaneously?

We currently have two farms - a SharePoint 2007 one and a SharePoint 2010 one. We have the same groups in both farms and the same userbase. At the moment when someone joins or leaves the company ...
0
votes
1answer
72 views

Is there a way to list all content deployment jobs on aspx page?

Is there any way to get all local contentdeployment jobs from within web application code? I'm trying to list all jobs on an aspx page in the backend of a site collection, but everytime I execute ...
1
vote
2answers
332 views

How to deny a group to a subsite

I'm using SharePoint 2013 I would to grant acces to a subsite by a specific Active Directory group. And i want to deny all other groups. So the group that's allowed is able to acces the subsite and ...
1
vote
1answer
464 views

Note board Web Part Security Permissions

I have a note board web part sitting on the default.aspx page of a site. I have both farm and site admin rights over the site and against each comment I can see a delete link - both for my own posts ...
0
votes
2answers
1k views

Sharepoint output list of users

I would like to output the users of a group, for 40 groups, or for every group within the SharePoint Portal. I would like to do this programatically through powershell or a command line tool for the ...
0
votes
2answers
238 views

How to remove sharepoint security group in the feature?

I want to remove custom security group from sharepoint 2010. I created custom security group as follows: SPGroup wcmGroup = currentWeb.SiteGroups[permissionName]; SPRoleDefinition ...
2
votes
0answers
95 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
1
vote
1answer
79 views

Sharepoint: Retrieve info on assigned user policy

A question from stackoverflow Case: Create a User Policy in SharePoint 2010 Web Application Management: assign 'Full read' to user XXX for site YYY; Call SiteData.asmx/GetContent for site YYY and ...
1
vote
3answers
192 views

Unable to login to site even though I am administrator of the site collection

I created one site collection and gave the site collection administrator as my name. But when I navigate to that site and try to login that site it is giving me an error that Access Denied. For all ...
0
votes
1answer
71 views

Only give permission to modify/delete a list item to the user that created it

I have created a simple Hyperlink list on which everyone can create, edit and delete items. Now I need to add some more restrictive permissions similar to the following: Only the users that created ...
2
votes
5answers
124 views

Is it possible to create a Blacklist in the usermanagement?

We use a Sharepoint 2010. We want to prevent the Site Administrators assign a specific role (e.g. "Domain\All Users") to a site. So is it possible to create (maybe with custom code), a blacklist for ...
1
vote
0answers
48 views

Is use of PageView web part poses a security risk?

I have two internal web applications in same domain, I want to integrate them within sharepoint using a PageView webpart. Some how the security community of the organization believes it would ...
0
votes
1answer
104 views

sharepoint 2010 hide admin pages

I have several lists on a public facing sharepoint site that are open to the public. These are simple lookup lists and this configuration can't change (not my call). Since users have access to the ...
1
vote
1answer
59 views

SpSecutityTrimmedControl runs in Pagepreview mode - ?pagepreview=true

I'm branding the sharepoint ribbon and need some changes (css) when the page gets in pagepreview mode. I've got this code <SharePoint:SpSecutirtyTrimmedControl runat="server" ...
0
votes
0answers
73 views

Proper way to get all lists of a certain type from an entire site collection regardless of current location

I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal. I'm currently using the following, but can't ...
1
vote
1answer
244 views

Webapp design for internet, intranet and extranet?

I am a beginner in Sharepoint and I must conceive a Sharepoint solution. I need to have an Intranet for employees as well as an access point for collaborators to a particular site in this intranet. ...
0
votes
2answers
87 views

DVWP - Across Multiple Lists with Distinct Permissions

I'm attempting to create a DVWP that merges 4 lists that share a content type schema but have distinct permissions. The issue I am having is that if a user does not have permissions to one of the ...
1
vote
1answer
103 views

Encrypting the search index(es) - any advice?

I have read up on how to configure SQL Server TDE to encrypt SharePoint content that resides in databases, but what about encrypting the search indexes (which reside on the file system)? Does anyone ...
1
vote
3answers
258 views

Changing a SharePoint group Title

What would be the harm of changing the name of a SharePoint group? I have a task list that has the SharePoint groups set in the 'Assigned To' for list items. I'm wondering would be the impact of ...
1
vote
3answers
918 views

401 with ClientContext

I am connecting to SharePoint via managed client api. ClientContext connects to the site and access the list data when I specify the site address as http://computer_name but when I give the configured ...
1
vote
1answer
176 views

Authentication - multiple web domains

We use claims based authentication and have one application running, say www.abc.com This application authenticates against AD via claimns provider. We would like to deploy another web site: ...
0
votes
3answers
4k views

removing NT AUTHORITY\authenticated users vs all authenticated users and adding domain group instead

I have a root site collection and under the "Style Resources Readers group" i have the NT AUTHORITY\authenticated and the all authenticated users . Are these the same groups but with different ...
1
vote
2answers
199 views

How to remove same session value for different sessions?

I received an error from the Security testing team as follows: It was observed that same session value is used for different sessions. After logout, session value should be cleared and the user ...
1
vote
1answer
667 views

Dissappearing SharePoint Groups

SharePoint groups started to disappear- totally randomly, within a single site collection. I am pretty sure they are not deleted because we have few site collection admins with knowledge. like this: ...
0
votes
1answer
100 views

sharepoint 2010: revoke rights to see “users and permissions”

I have a sharepoint site and i want few users not to see "Users and Permissions" in 'site settings'. It should not disturb anything else. Please help me.
0
votes
1answer
55 views

SharePoint 2010: Site security

I have Site collection (http://myapp/sites/sitcol) and i have two site in that site collections i.e root site (http://myapp/sites/sitcol/) and site2 (http://myapp/sites/sitcol/site2). i have two ...