Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
0answers
93 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
0
votes
3answers
350 views

Denying the manage rights permission

I'm trying to fullfill a requirement which forces the use of Active Directory groups. I'm having issues getting to where I want to be. Upon creation of a new site, I'm going to use AD groups to ...
0
votes
1answer
81 views

How to show what level of permission a group or user has to a site?

In SharePoint 2007 when you go to a site and view advanced permissions (Site Actions - Site Settings - Modify All Site Settings - Advanced Permissions) you are presented with a page that has a table ...
0
votes
2answers
53 views

Capture SharePoint role group and group members?

For our audit process I need to regularly capture all of our SharePoint role groups (for our main site collection) and the members in each group. Is there a reliable way to approach this problem?
0
votes
1answer
39 views

Frequently Needed Business Rule About Security that SharePoint Does Not Provide OOTB

Suppose that i have two lists like this REGION_LIST [ RegionName(text), RegionResponsibles(multi-select peoplepicker) ] ISSUES_LIST [Some issue related columns, Region(lookup) ] Main requirement is ...
1
vote
0answers
350 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
1
vote
1answer
84 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
2
votes
2answers
2k views

How to set authentication model to allow cross-domain access?

How do I change the security settings to allow cross-domain on the same web-server? I have multiple instance or site collections on the same server but want to make sure that web-services to ...
7
votes
2answers
2k views

ValidateFormDigest - when exactly does it need to be called?

Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest? Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...
4
votes
2answers
726 views

Sharepont 2013 - NTLM Logout

Our SharePoint 2013 site will not log users out unless the browser is completely closed. We are using NTLM authentication but the site is hosted, so it is external accessible. We are afraid users ...
2
votes
1answer
86 views

How to add security to a page using powershell

I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
0
votes
1answer
46 views

giving access to an entire web application

Im trying to elevate someones permissions so that they can edit and add users etc across all site collections in our farm. I added the user into the farm admins group but it doesnt look like their ...
1
vote
2answers
859 views

Best Practices to make my internet facing portal secure

Ok, so I finished developing my internet site. It uses a federation provider to authenticate public user. Now what I'm concern of, is the site security. I see that any logged in user can see the ...
0
votes
1answer
780 views

In SP 2010 or SP2013 How can I have search results use audience targeting

I have items in my document library that are configuered for audience targeting. What I would like to do is have the items in my search results page "search results" web part filter the items at an ...
0
votes
1answer
111 views

Is there a way to limit viewing permissions of list items based on a property?

I have a custom list which has a property "Department" which is a multi-select checkbox list. So each item in this list can be one of multiple different Departments. I would like to make these items ...
1
vote
0answers
301 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
0
votes
1answer
69 views

Conditional SPSecurity.RunWithElevatedPrivileges

Is there a way to use SPSecurity.RunWithElevatedPrivileges conditionally. For example, assume that i have a code block, if some condition is met i want to run this code block in ...
3
votes
1answer
1k views

Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given

Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying: This action couldn't be performed because Office doesn't recognize the ...
0
votes
1answer
426 views

My Site creation failure for user after moving My Sites to dedicated web application

I have created a new web application at port 8080 with the intention of having all personal site creation (i.e. My Sites) stored in a dedicated WSS_Content database (i.e. a best practice ...
0
votes
1answer
54 views

SP2010, are the search index / query component files a risk for highly secure documentation?

Say I have some secure documentation held in SharePoint. Now say the SQL database/BLOB location is encrypted. Enterprise Search is used to crawl this content and therefore the content is indexed. Is ...
3
votes
3answers
3k views

Multiple login prompts are driving users nuts

What are the typical causes of multiple login prompts on sharepoint sites? We have a production site where users who login outside of the domain (from home) are prompted multiple times (3 or so ...
1
vote
2answers
653 views

Is it possible to add a security trim that filters by user groups?

In my left hand side bar I have 3 links to downloads- one for each of three different companies. I need each company to log in and see only the one link to their companies downloads - not all 3 links ...
0
votes
1answer
41 views

Accessing word docs on Sharepoint site. Are files cached locally?

My client wants users to access word and excel docs through the company SharePoint site from remote locations, however he does not want them to have access to the files after they have logged off the ...
0
votes
2answers
72 views

Full Control Permission Problem

I am in a group which has Full Permission (site collection owners). However i cant add users to groups that i am not a member off. I thought this would give me full overriding permissions. Am i ...
1
vote
1answer
593 views

Get Access to List View webpart without having access to list

So I'm developing an event management system at the moment where there are two user groups, "editors" and "attendees". By registering for an event, the SPUser is added to a list "attendeeList" which ...
1
vote
2answers
648 views

I need a Antivirus Scanner for SharePoint 2013

I'm using a Windows 2012 server. With SharePoint server 2013 installed. When I wanted to install Forefront for SharePoint 2010 I get this error. No protectable server applications were detected. ...
1
vote
1answer
1k views

How can I add “All Authenticated users” (FBA) to a SharePoint Group using Powershell?

I have an FBA site and I need to add "all authenticated users" to a group using PowerShell. How can I do that?
1
vote
0answers
120 views

Why is AddComment on SocialCommentManager throwing SPException?

When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying "The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
1answer
236 views

SharePoint 2013 S2S Configuration with Exchange

I am trying to configure Site Mailboxes and eDiscovery between SharePoint 2013 and Exchange 2013. The guidance on both of these is pretty much the same, create a server to server trust, then grant ...
1
vote
1answer
980 views

Security For Custom Application Pages

When managing security for any control on a page we use SPSecurityTrimmedControl. But what to do when defining permissions for a custom application page? How do we restrict unauthorized people to ...
0
votes
1answer
32 views

Maintaining role groups and users in two farms simultaneously?

We currently have two farms - a SharePoint 2007 one and a SharePoint 2010 one. We have the same groups in both farms and the same userbase. At the moment when someone joins or leaves the company ...
1
vote
2answers
1k views

How to deny a group to a subsite

I'm using SharePoint 2013 I would to grant acces to a subsite by a specific Active Directory group. And i want to deny all other groups. So the group that's allowed is able to acces the subsite and ...
1
vote
1answer
811 views

Note board Web Part Security Permissions

I have a note board web part sitting on the default.aspx page of a site. I have both farm and site admin rights over the site and against each comment I can see a delete link - both for my own posts ...
0
votes
2answers
359 views

How to remove sharepoint security group in the feature?

I want to remove custom security group from sharepoint 2010. I created custom security group as follows: SPGroup wcmGroup = currentWeb.SiteGroups[permissionName]; SPRoleDefinition ...
0
votes
1answer
151 views

Site collection administrators / owners question

I'm stuggling over a somewhat architectural question which concerns site collection admins and owners. To begin with, I found the thread answerd by Per Jakobsen (here Site collection owners and site ...
2
votes
0answers
109 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
1
vote
1answer
98 views

Sharepoint: Retrieve info on assigned user policy

A question from stackoverflow Case: Create a User Policy in SharePoint 2010 Web Application Management: assign 'Full read' to user XXX for site YYY; Call SiteData.asmx/GetContent for site YYY and ...
1
vote
3answers
353 views

Unable to login to site even though I am administrator of the site collection

I created one site collection and gave the site collection administrator as my name. But when I navigate to that site and try to login that site it is giving me an error that Access Denied. For all ...
3
votes
5answers
198 views

Is it possible to create a Blacklist in the usermanagement?

We use a Sharepoint 2010. We want to prevent the Site Administrators assign a specific role (e.g. "Domain\All Users") to a site. So is it possible to create (maybe with custom code), a blacklist for ...
1
vote
0answers
65 views

Is use of PageView web part poses a security risk?

I have two internal web applications in same domain, I want to integrate them within sharepoint using a PageView webpart. Some how the security community of the organization believes it would ...
0
votes
1answer
113 views

sharepoint 2010 hide admin pages

I have several lists on a public facing sharepoint site that are open to the public. These are simple lookup lists and this configuration can't change (not my call). Since users have access to the ...
1
vote
1answer
67 views

SpSecutityTrimmedControl runs in Pagepreview mode - ?pagepreview=true

I'm branding the sharepoint ribbon and need some changes (css) when the page gets in pagepreview mode. I've got this code <SharePoint:SpSecutirtyTrimmedControl runat="server" ...
0
votes
1answer
93 views

Only give permission to modify/delete a list item to the user that created it

I have created a simple Hyperlink list on which everyone can create, edit and delete items. Now I need to add some more restrictive permissions similar to the following: Only the users that created ...
2
votes
3answers
1k views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
0
votes
0answers
105 views

Proper way to get all lists of a certain type from an entire site collection regardless of current location

I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal. I'm currently using the following, but can't ...
1
vote
1answer
272 views

Webapp design for internet, intranet and extranet?

I am a beginner in Sharepoint and I must conceive a Sharepoint solution. I need to have an Intranet for employees as well as an access point for collaborators to a particular site in this intranet. ...
1
vote
2answers
696 views

Can't open sharepoint designer 2010 when using Basic authentication over a non-SSL connection

I have a sharepoint site and we have to have basic authentication set for users to have access. But now when i go to open up a site in SP 2010 to do some work i get the error and get transferred to ...
0
votes
2answers
95 views

DVWP - Across Multiple Lists with Distinct Permissions

I'm attempting to create a DVWP that merges 4 lists that share a content type schema but have distinct permissions. The issue I am having is that if a user does not have permissions to one of the ...
1
vote
1answer
133 views

Encrypting the search index(es) - any advice?

I have read up on how to configure SQL Server TDE to encrypt SharePoint content that resides in databases, but what about encrypting the search indexes (which reside on the file system)? Does anyone ...
1
vote
3answers
650 views

Changing a SharePoint group Title

What would be the harm of changing the name of a SharePoint group? I have a task list that has the SharePoint groups set in the 'Assigned To' for list items. I'm wondering would be the impact of ...