Security is the protection of information and property from theft.
0
votes
1answer
112 views
manage permissions per list
I have a SharePoint 2007 Foundation portal with about 20 sites, each mirrored per client differing only in membership groups and client-specific content. The person who set up the site created 2 ...
3
votes
1answer
531 views
What permissions do I need for a user to see all entries in a list where typical users can see only their own submissions?
I have a list where users can create and see their own items, but not other users' items. I, being the site owner, can see all items. How can I give specific users within a Sharepoint Group the ...
1
vote
3answers
487 views
Encrypt SSN column in a list
I need to encrypt social security column in a list. What are my options?
ps: Did not find Encryption in the Tags.
Actually, looking for something like this (Column Level Security, but non ...
2
votes
3answers
188 views
Deny user access from SharePoint Native but allow it from custom application
How can i restrict a user from entering SharePoint - unless he is using my custom application?
For example, a user tries to open http://Mysite , he gets an access denied error.
But as the same time, ...
0
votes
2answers
145 views
Using Information Management Policies to prevent users from downloading videos from a document library
I have a basic SharePoint 2007 document library which contains a number of videos (.wmv files). This list is lives within our company's intranet and so is accessible only by authorised users.
We want ...
1
vote
1answer
237 views
Access control with a very large AD group
I'm working with a company that has 100k+ employees, contractors, and external partners who have user accounts in their Active Directory. People fall into different categories:
Employees (60k)
...
2
votes
1answer
302 views
Security Exception - Trying to load MySite Blog
When I try to run this async query it fails:
private void SomeFunction()
{
Thread thread = new Thread(GetBlogInfo);
thread.Start();
}
private void GetBlogInfo()
{
...
0
votes
1answer
267 views
How to give access programatically to a site
In my scenario we want to customize the access request page.
We already know how to create an application page, and with a powershell command, instruct sharepoint to use that page instead.
...
5
votes
5answers
781 views
How to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges
Is there a way to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges?
class Foo
{
public static void Bar()
{
if (CODE_RUNS_ELEVATED)
{
Debug.WriteLine("You ...
3
votes
1answer
593 views
more than one attachment field
We are planning to retire one of our old fashion tools and currently evaluating Sharepoint 2010.
in our current tool, we have 3 different attachment sections two of which are visible to customer, and ...
1
vote
1answer
88 views
Can I use all type of authentications in a sharepoint site external users also
Can I use the same authentications of internal users (available in AD) to external users.?
If no what all authentication method I can use for external users?
Is there any difference in ...
2
votes
1answer
2k views
How to remove a permission to a SPPrincipal on a Item (programmatically)
I'm trying to work with privileges on elements of a list. I want the item to mantain the same privileges for all SPPrincipal I don't modify.
This is the code
public static void ...
8
votes
2answers
1k views
Java to Sharepoint interface, with claims based authentication
I have a sharepoint server with a claims-based authentication (ADFS server).
I have a Java app that needs to push data to a sharepoint list, preferably over the REST API, and with the additional ...
2
votes
3answers
434 views
Column Level Security Products
I am looking for recommendations on products that handle column level security. What is the best product out there? Any input will be greatly appreciated.
Thanks!
4
votes
1answer
3k views
Unable to evaluate expression because the code is optimized or a native frame is on top of the call stack
this code thow an exception at "Item.Update();"
private void AddEmail()
{
site = SPContext.Current.Site;
web = site.RootWeb;
...
0
votes
1answer
41 views
Additional databse - best practices
Our system needs to synchronize data with external systems by web services. We want additional database to keep needed data and then be able to access it. I wonder how to resolve issue with database ...
1
vote
4answers
709 views
Access denied - Let me in!
I'm a farm admin
I'm a site collection admin
I'm a member of <site> Owners
Access denied logging in (Windows)
What else could it be?
FYI, in system.web
<authentication mode="Windows" ...
1
vote
1answer
1k views
Sign in as a different user access denied
Clicking the "sign in as a different user" link from the system menu in SP 2010 yields an access denied error.
URL is:
\_layouts\closeConnection.aspx?loginasanotheruser=true
any ideas?
3
votes
2answers
1k views
Is it possible to limit the visibility of list items to not only just me (the author), but anyone from my company too?
I have a custom list on a SharePoint 2010 extranet site which users from various external companies can add items to. The list's Permission Settings page allows you to make all items visible to all ...
1
vote
4answers
2k views
Modifying the current list item in a workflow
I have a workflow running when an item is adding to a document library. In this workflow, I have a code activity that I am attempting to set permissions to the list item. I am trying to break ...
0
votes
1answer
2k views
add users to central admin but don't allow them acces to change security or permissions?
Is it possible to give users access to Central Admin but deny them access to change security or permissions.
For example, they can do everything from creating a web application, service application, ...
1
vote
1answer
168 views
Authentication - multiple web domains
We use claims based authentication and have one application running, say www.abc.com
This application authenticates against AD via claimns provider.
We would like to deploy another web site: ...
1
vote
1answer
117 views
Cannot create site in different web application - Silverlight Client Object Model
I am developing a Silverlight application. It interacts with SharePoint 2010 using SharePoint Silverlight Managed Client Object Model.
One of the application functionalities is to create a ...
1
vote
1answer
44 views
Security Issue for a user group in SharePoint 2010
For a SharePoint group 'A', I made the security to Read only. Now my requirement is that,
I have created a custom webpart, with one text box and a button, Where the users from 'A' group was supposed ...
0
votes
3answers
766 views
How to troubleshoot Access Denied without guessing?
I had an issue where users are getting "Access Denied" even though they shouldn't. It turned out to be related to custom code and fixed in the end, but there was a lot of guesswork involved.
Is there ...
1
vote
2answers
990 views
SharePoint 2010 Insights (PerformancePoint): '401 Unauthorized' error on invoking 'Run Dashboard designer'
Environment: SharePoint 2010 on Windows 2008 R2 Standard + SQL Server 2008 R2
I am trying to setup the BI infrastructure Lab as outlined in this article: ...
1
vote
2answers
741 views
How to force the Word Automation Services Timer to run?
I need to run the Word Automation Services immediately after adding a job. My code is running in a workflow.
Here is what I got so far :
SPSecurity.RunWithElevatedPrivileges(delegate()
{
using ...
1
vote
2answers
391 views
Does breaking library/list security inheritance also break it's items inheritance?
We need to break inheritance on a document library. Some users of a site should have read only to document library 1 while some users should have contributor rights to document library 2 (both within ...
3
votes
1answer
217 views
users with Contribute getting 403 forbidden error
This is something I haven't seen in 4 years. Users in SP Group "Accounting" with Contribute access getting 403b forbidden error. It was working fine until this morning. However, I log in as sp admin ...
1
vote
1answer
35 views
Blocking Access to Specific Sites For Certain Alternate Access Mappings
Ok, so I'm not sure that this is entirely possible, but wanted to pose the question: would it be possible to block access to certain content when the site is accessed from a certain alternate access ...
1
vote
3answers
2k views
Are there any free security audit tool for SP?
Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
2
votes
1answer
373 views
Change List Item Permission via Web Services?
Using web services, is there a way to assign a list item different security than the rest of the list?
Lets say I have 3 rows in the list and 2 different groups.
1. A ; Group A & B can see
...
1
vote
4answers
3k views
Viewing all permissions for a user or AD Group in SharePoint 2007?
Similar to this question is there a similar way to look up permissions for a given user or AD Group? SharePoint 2007 really doesn't work in PowerShell and the Internet didn't yield much here.
2
votes
1answer
142 views
Can I use UAG to isolate my customers' portals on our extranet?
It sounds like the best practice for isolating different customers on an extranet is to use separate site collections for each customer (as is recommended in every answer to this question). If I have ...
1
vote
4answers
527 views
Quick Launch View - Problem
I have designed the quick launch for a SharePoint 2010 site in master page, Now for some pages I do not want the quick launch to show up, (Or better say some SharePoint groups).
So I added a web ...
0
votes
3answers
801 views
Force a Sharepoint Group's landing page
Lets say I have two groups, Group A and Group B.
By default my sites landing page is home .aspx (If I use http://sok1234:456/ It will take me to home.aspx ).
Now my requirement is when a user from B ...
0
votes
3answers
700 views
Securing SharePoint for External Access
We are exploring the possibility of making our Intranet available to our employees outside of our network (and not over VPN). Besides firewalls/forward proxies and such (like the Threat Management ...
9
votes
3answers
1k views
Best way to Impersonate in SharePoint
So far, I am aware of below 3 ways of performing impersonation in a SharePoint web part or page :
Using Win32 API
[DllImport("advapi32.dll", SetLastError=true)]
public static extern bool ...
0
votes
1answer
769 views
Unauthorized Access Exception when trying to get site Owner
I get the following exception message:
{"Attempted to perform an unauthorized operation."}
at Microsoft.SharePoint.SPSite.get_Owner()
at MySite.Intranet.QuickLinks.MySiteviewpage.GetSiteOwner()
...
4
votes
1answer
111 views
SharePoint permissions reading from AD
I have a SharePoint sub web with unique permissions, within the site I have 3 SharePoint groups (Owner, Contributor and Viewers), in each of these groups I am including an Active Directory group.
...
1
vote
2answers
175 views
How to remove same session value for different sessions?
I received an error from the Security testing team as follows:
It was observed that same session value is used for different sessions. After logout, session value should be cleared and the user ...
0
votes
2answers
301 views
Security for SharePoint 2010 site pages
I have three pages in a SharePoint site. Lets say
A.aspx
B.aspx
C.aspx
I also have two groups - say ALLACCESS and LESSACCESS
now I want
A.aspx page should access only by ALLACCESS, no ...
5
votes
3answers
344 views
Possible to security trim what web parts a user can put on a page?
Basically when you select Insert -> Web Part you get this menu:
Is it possible to determine what is available here based on a users role?
0
votes
1answer
285 views
Is it possible to create an external content type from WCF service with message security?
I have an external content type that consumes a WCF service. So far it's something simple, over HTTP, no security, just for tests. Here is a sample to get an idea.
Now I'm stepping up a gear and want ...
4
votes
2answers
786 views
Make a folder in a document library read only without using security
I have a document library with about 25,000 folders in it, each folder represents a task in our task system and is used as a document repository for those tasks.
Of the 25,000 tasks about 22,000 are ...
1
vote
0answers
38 views
Secure Data from Farm Admins and Database Admins
I am working with a client whose farm admins and database admins may not be approved to view information in one of the site collections due to governmental regulations. Therefore, he would like to ...
0
votes
1answer
176 views
All domain users have full control
On our SharePoint 2010 development server, I noticed that all domain users had full control. On the "Intranet Owners" group, which has Full Control permission level, there are the admin accounts from ...
0
votes
1answer
460 views
Feature Admin tool gives AccessDenied error
I'm using the Feature Admin Tool to discover faulty features on my SharePoint 2010 farm. However, when I click the "Find Faulty Feature in Farm", it throws this error:
---------------------------
An ...
2
votes
4answers
1k views
Limit users permission in their own my site
we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
0
votes
0answers
89 views
Users denied access to certain site collection until an administrator opens it
We are having a problem with users getting "Access denied" errors when trying to access a certain site collection. These users all have the proper permissions to the site and have accessed it in the ...
