Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
1answer
71 views

Only give permission to modify/delete a list item to the user that created it

I have created a simple Hyperlink list on which everyone can create, edit and delete items. Now I need to add some more restrictive permissions similar to the following: Only the users that created ...
1
vote
3answers
521 views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
0
votes
0answers
73 views

Proper way to get all lists of a certain type from an entire site collection regardless of current location

I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal. I'm currently using the following, but can't ...
1
vote
1answer
244 views

Webapp design for internet, intranet and extranet?

I am a beginner in Sharepoint and I must conceive a Sharepoint solution. I need to have an Intranet for employees as well as an access point for collaborators to a particular site in this intranet. ...
1
vote
2answers
475 views

Can't open sharepoint designer 2010 when using Basic authentication over a non-SSL connection

I have a sharepoint site and we have to have basic authentication set for users to have access. But now when i go to open up a site in SP 2010 to do some work i get the error and get transferred to ...
0
votes
2answers
86 views

DVWP - Across Multiple Lists with Distinct Permissions

I'm attempting to create a DVWP that merges 4 lists that share a content type schema but have distinct permissions. The issue I am having is that if a user does not have permissions to one of the ...
1
vote
1answer
103 views

Encrypting the search index(es) - any advice?

I have read up on how to configure SQL Server TDE to encrypt SharePoint content that resides in databases, but what about encrypting the search indexes (which reside on the file system)? Does anyone ...
1
vote
3answers
258 views

Changing a SharePoint group Title

What would be the harm of changing the name of a SharePoint group? I have a task list that has the SharePoint groups set in the 'Assigned To' for list items. I'm wondering would be the impact of ...
0
votes
3answers
4k views

removing NT AUTHORITY\authenticated users vs all authenticated users and adding domain group instead

I have a root site collection and under the "Style Resources Readers group" i have the NT AUTHORITY\authenticated and the all authenticated users . Are these the same groups but with different ...
1
vote
1answer
598 views

SharePoint 2007: Farm administrator process

I have run into an interesting issue. We added a new user as a Farm Admin on the SharePoint 2007 env. The next day the user's account was disabled by IT as it was flagged by monitoring as the SPS ...
0
votes
1answer
55 views

SharePoint 2010: Site security

I have Site collection (http://myapp/sites/sitcol) and i have two site in that site collections i.e root site (http://myapp/sites/sitcol/) and site2 (http://myapp/sites/sitcol/site2). i have two ...
0
votes
1answer
100 views

sharepoint 2010: revoke rights to see “users and permissions”

I have a sharepoint site and i want few users not to see "Users and Permissions" in 'site settings'. It should not disturb anything else. Please help me.
0
votes
3answers
3k views

Users get access denied but “check-permissions” claim they should have access

SharePoint 2010 is giving me a major headache. We have a site collection with a number of sites where we are trying to give certain users access to certain areas of the site. The problem is that ...
1
vote
1answer
432 views

Add solution from within event receiver - how to sort out “access denied” errors?

I'm handling the WebProvisioned event in order to add and deploy a solution that's relevant to the site being created. The solution is being created dynamically based on parameters of the site but for ...
0
votes
1answer
81 views

Single files permission error (cannot modify/delete)

When I try to modify or delete a file on a subsite I get the "This control is currently disabled" error on the ribbon, and "this item is no longer available" if I try to click on the dropdown-triangle ...
0
votes
1answer
716 views

Powershell and CredSSP in Production Environments

I try deploy Sharepoint WSP projects using PowerShell Remoting. See PowerShell Remoting Sharepoint 2010 Error Solution is configure CredSSP for Sharepoint. But Microsoft says: Caution: Credential ...
0
votes
1answer
642 views

Taxonomy.asmx returns sometimes 'No credentials are available in the security package'

I've created a WCF WebService which connects to the Taxonomy service from SharePoint with a 'Service Reference' in Visual Studio 2010 to the ...
1
vote
2answers
445 views

How to make dropdown link only visible to a certain group of users?

So we have a Management Meeting every two weeks and inside there is confidential information. Basically we want to make it so that link for this site/page is not even visible except to users within a ...
0
votes
1answer
72 views

Is there a way to list all content deployment jobs on aspx page?

Is there any way to get all local contentdeployment jobs from within web application code? I'm trying to list all jobs on an aspx page in the backend of a site collection, but everytime I execute ...
2
votes
1answer
1k views

How to Set Forms Authentication Timeout?

I have a public facing SP2010 site that uses forms authentication (default ASP.NET membership provider). I noticed that The user stays logged in even after hours of inactivity. We need the user to be ...
3
votes
1answer
270 views

SPSecurity.CatchAccessDeniedException = false: Does Sharepoint keep this setting?

When I add SPSecurity.CatchAccessDeniedException = false; this disables the redirection to a login site. Does Sharepoint keep that setting until I set it to "true" or just as long until the object is ...
2
votes
0answers
294 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
2
votes
1answer
106 views

SSRS 2008 and SharePoint integrated mode - security flaw?

Here is my scenario: I've got SSRS 2008 R2 running in integrated mode with SharePoint 2010. Everything works as expected in that I can create data sources, models (either through studio or via the ...
0
votes
1answer
290 views

Event Receivers on Add/Remove Users

I need some design ideas for a requirement to audit when uses are added/removed from an object. I need to collect the user doing the add/remove, date time, and reason for adding. I need to do this to ...
1
vote
1answer
260 views

SPUtility.GetPrincipalsInGroup not working when claims authentication is enabled

Method SPUtility.GetPrincipalsInGroup can be used to resolve users that belongs to a AD Group. However, when claims authentication is enabled, this method doesn't work as expected. Is there another ...
0
votes
1answer
78 views

Security involved with running a batch file to create Document Libraries

I was wondering what kind of permission levels should a batch have to execute procedures that create programmatically Document Libraries on SharePoint 2010. Has someone done that?
1
vote
2answers
718 views

Allow a specific file type to be rendered in iFrame

We've been looking at enabling the Permissive File Handling in Central Admin of our SharePoint 2010 on an intranet site collection. However, we're wondering if we can allow specific file types to be ...
5
votes
1answer
1k views

Sharepoint manage trust/add certificate

Hi I try to add a certificate under "central administration>security>manage trust" but I alwas get following error. The Root Certificate that was just selected is invalid. This may be ...
0
votes
2answers
354 views

Is an UpdatePanel a bad decision?

After talking to a few people, and asking around here, I feel like the only way to securely do calls asynchronously is with an updatepanel. (Context: Creating an Upvote/Downvote system on SharePoint ...
1
vote
0answers
1k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
1
vote
1answer
201 views

Audit log a specific user (or: Monitor the admin)

Is it possible to audit log only specific users (thus keeping the Audit-log under control and not harming performance)? Background Sitecolletion admins can view and edit everything (de facto SP ...
0
votes
1answer
80 views

Adding/Updating to a SharePoint List with AJAX securely?

I'm creating a Site Definition that will have a Stack Overflow like Q/A system. I'm hung up on the upvote/downvote system. I see a number of ways to do this, but what I think works best is to have ...
2
votes
1answer
482 views

Make all sharepoint specific cookies non-persistent?

Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
0
votes
1answer
142 views

Site Permissions AD Query

When assigning permissions to a site in Sharepoint 2010, is it possible instead of specifically adding a group or a user, to create an LDAP query or something simular. For example I have a group ...
0
votes
1answer
274 views

Security Permissions broke while restoring the site on a new farm

I got a problem while restoring SP2010 sub-site from our old SP2010 farm to new farm through a full backup. The subsite on old farm had unique permissions. As well as the lists inside the sub-site ...
2
votes
2answers
79 views

Should I patch my intranet SharePoint?

SharePoint patching is a hassle and takes a lot of time to test and deploy, My SharePoint is an intranet site (within my organization's premises). Some fellow IT admins advised me to patch only ...
2
votes
1answer
119 views

Extending SharePoint groups metadata?

In an application I'm building, I have to create and manage groups based on business rules. Each group must have properties like managers (yes, several managers) and members, with some other ...
7
votes
1answer
325 views

How does EU Cookie law affects SharePoint Sites?

The Euorpean Union has forced a new cookie law to protect privacy of a user. The full documentation is at Information Commissioner’s Office guidance According to an extract from the above document, ...
2
votes
3answers
2k views

How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)

Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
2
votes
4answers
3k views

Field-Level Security

Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...
1
vote
1answer
2k views

What are the relationship between administrators groups of domain, dev computer and of Sharepoint services?

I know-know I can search and read but anyway I would need to ask in order to escape possible typos, personal misunderstandings and to better remember. I develop on a machine with installed ...
1
vote
1answer
2k views

“DWORD (32-bit) Value” or “”Qword (32-bit) Value" - which one should I configure in Windows 64-bit registry?

"DisableLoopbackCheck & SharePoint: What every admin and developer should know" advises to disable ("infamous") "loopback check" completely on dev machine by following "You receive error 401.1 ...
0
votes
1answer
340 views

“404 FILE NOT FOUND” on my username entries

In Sharepoint 2010 Central Administration --> Security --> Manage the farm admii nistrator group (Central Administration : Site Settings : People and Groups - Farm Administrators), when I click on my ...
0
votes
1answer
84 views

Right Management Sharepoint

I have a sharepoint list. Users should be able to create new items and change some attributes. I gave full access for the users on the list items. But now I think there is a security gap: what ...
0
votes
1answer
593 views

Sharepoint 2010 users strangely removed from Sharepoint Group (Expert Advise required)

Since 3 months client portal was working fine suddenly due to some network problem we restarted SharePoint server, after that some Active directory users complained system was inaccessible, where ...
2
votes
1answer
424 views

Uploading files using object model

I'm experiencing some problems adding documents to a library using the object model. I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
1
vote
3answers
564 views

Item-Level Security Boundaries

Item-Level security boundaries are defined in the Software boundaries document at 1000 items. In the Advanced List Settings you can specify Item-level Permissions to "Create items and edit items that ...
1
vote
1answer
361 views

Get list items even if user does not have access to those items

Is there a way to get items from a list even if the current user does not actually have acces to them? SPSecurity.RunWithElevatedPrivileges does not seem to work! I have a special case in which I ...
0
votes
2answers
515 views

All users in multi tenant environment

I have a problem with authentication in a multi tenant environment. I have a couple of seperate customers which all have their own SharePoint environment within our hosted environment. In the AD, I ...
1
vote
3answers
3k views

Sharepoint 2010 Item level Permission to a Document Library is Our approach right?

We are planing to apply Item level Permission on document library and want share point experts advise...are we going right way or we will fall in performance issue or others.. What We Have : 1- We ...