Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
3answers
588 views

List users in SharePoint group running as system

This works as local administrator only, but I'm trying to figure out how I can make it work with NT AUTHORITY\SYSTEM. It starts spitting out group members but fails with access denied on a specific ...
1
vote
1answer
80 views

Managing SharePoint groups at site/site collection level

SharePoint groups are created at site collection level and are assigned to a site. By site collection level it refers to root site. So, reframing the above sentence we get:- SharePoint groups are ...
2
votes
0answers
31 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
1
vote
2answers
634 views

authentication between host-named site collection, https and http

Here's my situation and I'm wondering what the best way to solve it is. I have two domains and I'm trying to pass credentials between them. Maybe it's not possible, but here goes...... Domain One ...
1
vote
1answer
159 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
5
votes
1answer
485 views

What has changed that the security scope limit for SharePoint 2010 is no longer 1000?

What appear to be outdated blog posts everywhere tell you to not exceed 1,000 security scopes per list. Some even provide hard evidence as to why this is a bad idea. What they seem to have in common, ...
0
votes
2answers
2k views

Prevent “Access Denied” error for domain users

I would like all members of the DOMAIN\Domain Users' or 'DOMAIN\Users' AD groups to have read-only access to a site collection and its subsites. I have added these groups to Site Permissions at the ...
3
votes
2answers
640 views

Access Denied from Migrated SP2010 -> 2013 Web App

I've migrated a web application's content database from SP2010 to SP2013. After the migration was complete, I am completely locked out of the web application. Navigating to the root site collection ...
0
votes
1answer
87 views

Login page insted of login prompt in Sharepoint 2013

I have been create a Team Suite site in Sharepoint 2013.When any body try to start seeing site pages a logon window like below image display : How I can show custom login page instead of this ...
0
votes
3answers
322 views

What is best way manage SharePoint webpart access to database?

I have my custom webpart, which have access to database. I need to configure data source, catalog, username and password, which allows webpart a access database. I don't want that users can see, what ...
0
votes
1answer
255 views

CSOM Form based authentication Security issue

I'm new in sharepoint development, I was looking for authenticating users via CSOM by using forms based authentication and I found below code. ClientContext ctx = new ...
1
vote
1answer
2k views

SharePoint 2007: Farm administrator process

I have run into an interesting issue. We added a new user as a Farm Admin on the SharePoint 2007 env. The next day the user's account was disabled by IT as it was flagged by monitoring as the SPS ...
1
vote
1answer
3k views

The remote server returned an error: (401) Unauthorized. on new App

I created a new app by following this tutorial http://blogs.msdn.com/b/bspann/archive/2013/01/19/asp-net-mvc-based-apps-for-sharepoint-2013-on-premises.aspx I was able to press F5 and it showed me ...
1
vote
1answer
3k views

ClientContext security won't work with claims-based SP2010 security enabled

I want to connect to SP2010 server with claims based authorization via client context. But I have security issue. First I didn't managed to connect with default credentials. Then I wrote: ...
2
votes
4answers
4k views

Field-Level Security

Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
1
vote
1answer
94 views

Strange SharePoint behaviour regarding “Check Permissions” in a web part

I have a web part in which I am displaying users from User Profile Service which is synced with AD. In my code I get all the users in current site and then see if they are part of any group. If they ...
0
votes
1answer
357 views

Can we add OU in SharePoint security group

Can we add OU in SharePoint security group instead of adding users or AD group?
3
votes
2answers
4k views

Sign in as a different user access denied

Clicking the "sign in as a different user" link from the system menu in SP 2010 yields an access denied error. URL is: \_layouts\closeConnection.aspx?loginasanotheruser=true any ideas?
2
votes
0answers
73 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
1
vote
2answers
3k views

PowerShell to Remove Site User Permission

I am looking for some help removing a User Permission from a site using PowerShell.
0
votes
1answer
288 views

How to use versioning when using same .snk file for multiple SharePoint projects in the same solution?

I am trying to find the right way to set up my SharePoint solution with miltiple projects (in VS2012). In that, I am having difficulty understanding the concept of reusing the strong name key file. ...
1
vote
2answers
138 views

How to set a powershell variable to a specific sharepoint page

I have a SharePoint 2010 documents library that contains about 50 .aspx pages. I want to break inheritance on about 6 pages and set them to specific permissions. I am able to get a page by numerical ...
0
votes
2answers
1k views

SharePoint 2010 Top Link Inheritence and Permissions

We have an issue in SharePoint (Enterprise) 2010 with our Top Link NavBar inheritance and permissions across sub-sites. Current Configuration We have a root site collection: RSC1. Under the root ...
0
votes
1answer
1k views

Powershell and CredSSP in Production Environments

I try deploy Sharepoint WSP projects using PowerShell Remoting. See PowerShell Remoting Sharepoint 2010 Error Solution is configure CredSSP for Sharepoint. But Microsoft says: Caution: Credential ...
0
votes
2answers
79 views

Disabling direct access to list and library

I have a publishing site in which there are several lists and libraries. I am displaying some list and libraries on home page and applied XSLT on them to give them desired look and feel. There is a ...
1
vote
0answers
32 views

Fine-tuning SP2013 Document Library permissions

I have the need to give access to a role for creating documents and folders in a document library and giving access to another role to create documents (but not folders) How would I go about doing ...
0
votes
1answer
169 views

Access control on list items based on the item's value

How can I restrict permissions (read/write) on list items based on the item's value? For ( a simplistic) example, I have a list "Appraisals" which has two entries - Manager and Employee of type ...
1
vote
1answer
643 views

Powershell to add users to custom security groups - getting 0x80070005 error

The following powershell reads an xml file and adds users to custom SharePoint security groups. If ([bool](([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) ...
1
vote
1answer
62 views

Sharepoint Foundation 2010 Hardening

I have never hardened a SharePoint site before and I am having a hard time using all the recommendations I find online. This blog post discusses the different accounts that should be used for ...
1
vote
3answers
212 views

List Security in Sharepoint

I need to set permissions for a list that looks like this: I have two different teams, each with a team lead and 3 team members. The team members should not see each others data. Team leaders have ...
1
vote
0answers
122 views

FBA Custom login page to use 2 factor authentication - simplified

User provides an username/password. Should validate those and only then proceed to step 2. User provides an additional authentication token. If succeeds user is authenticated against SharePoint and ...
0
votes
1answer
449 views

How to give access programatically to a site

In my scenario we want to customize the access request page. We already know how to create an application page, and with a powershell command, instruct sharepoint to use that page instead. ...
1
vote
4answers
3k views

Modifying the current list item in a workflow

I have a workflow running when an item is adding to a document library. In this workflow, I have a code activity that I am attempting to set permissions to the list item. I am trying to break ...
0
votes
1answer
165 views

Limited Access permission being applied for a user at the root site

I have a list where security inheritance is not enabled. On adding an item to a list in the ItemAdded event receiver I'm applying custom security to the list item. The consequence of doing this is ...
3
votes
1answer
45 views

Audit the adminstrator

we are looking into the possibility of outsouring the administration of our farm. Because of the nature of sensitive data inside some of the site collection, we want to prevent data leakage. We want ...
2
votes
1answer
22 views

mandatory security group

trying to solve a permission issue. We have created a custom permission level called Site Owner that removes the ability to create subsites but keeps everything else, including the ability to edit ...
1
vote
3answers
41 views

Why can people change other people's items even though I set it up not to?

I have created a shared list where members can add new items and edit their own items. These members only have the ability to contribute, and not the ability to manage lists. In the list's advanced ...
0
votes
0answers
70 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...
2
votes
1answer
693 views

Make all sharepoint specific cookies non-persistent?

Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
7
votes
5answers
2k views

What is the difference between SPContext.Current.Web and SPContext.Current.Site.OpenWeb()?

My colleague found that some scenarios of working with SPWeb objects depend on how you obtain them. I'm not talking of impersonating with UserTokens - that another story. But at times when you write ...
1
vote
1answer
271 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
0answers
30 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
0
votes
1answer
386 views

Security Permissions broke while restoring the site on a new farm

I got a problem while restoring SP2010 sub-site from our old SP2010 farm to new farm through a full backup. The subsite on old farm had unique permissions. As well as the lists inside the sub-site ...
1
vote
2answers
763 views

How can I learn how to create a delegation engine? [closed]

One of the last places I worked at had a delegation engine in SharePoint, a SharePoint List that specified the SharePoint groups that would be sought for approval for a workflow based on that ...
0
votes
2answers
701 views

Using JavaScript to redirect a page

I am using JavaScript to redirect users who aren't owners to a different page. I am using $(document).ready(function() { //check owner status if(!isOwner) { ...
2
votes
3answers
1k views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
0
votes
1answer
111 views

Access all workflow tasks without being assigned to for validation

I have a request approval sequential workflow that has many tasks created upon approval. For each approval, Im using a custom webpart that shows different panels based on the status of the request. ...
1
vote
1answer
496 views

Approval Status is different given user's permissions. Visitors can see non-approved items

The approval status for blog post items is different given user's permission on a blog site. I had the Draft Item Security setting set to "Only users who can approve items (and the author of the ...
1
vote
2answers
321 views

SP_Admin SQL Permissions

I'm trying to create a web application using powershell and I'm getting a log in error with the SP_Admin account. I'm not sure if I've made a mistake when I was setting up the environment, I might ...
0
votes
1answer
50 views

Extended Web application

For my project I need to convert a Classic mode Authentication WebApplication (name Sharepoint - 8080) to Claims and add Forms Based Authentication to it. For that matter I extended the webapplication ...