Security is the protection of information and property from theft.

learn more… | top users | synonyms

2
votes
1answer
440 views

Uploading files using object model

I'm experiencing some problems adding documents to a library using the object model. I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
0
votes
0answers
93 views

Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx

Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
1
vote
1answer
374 views

Audit log a specific user (or: Monitor the admin)

Is it possible to audit log only specific users (thus keeping the Audit-log under control and not harming performance)? Background Sitecolletion admins can view and edit everything (de facto SP ...
2
votes
5answers
2k views

Allow users to view items in Document Library, but not open the files

I have the requirement to allow users to view the content of a document library, including browsing through folders, but not actually open the individual files. There doesn't appear to be a ...
0
votes
1answer
81 views

How to show what level of permission a group or user has to a site?

In SharePoint 2007 when you go to a site and view advanced permissions (Site Actions - Site Settings - Modify All Site Settings - Advanced Permissions) you are presented with a page that has a table ...
0
votes
2answers
53 views

Capture SharePoint role group and group members?

For our audit process I need to regularly capture all of our SharePoint role groups (for our main site collection) and the members in each group. Is there a reliable way to approach this problem?
0
votes
1answer
39 views

Frequently Needed Business Rule About Security that SharePoint Does Not Provide OOTB

Suppose that i have two lists like this REGION_LIST [ RegionName(text), RegionResponsibles(multi-select peoplepicker) ] ISSUES_LIST [Some issue related columns, Region(lookup) ] Main requirement is ...
1
vote
1answer
84 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
1
vote
0answers
350 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
0
votes
1answer
151 views

Site collection administrators / owners question

I'm stuggling over a somewhat architectural question which concerns site collection admins and owners. To begin with, I found the thread answerd by Per Jakobsen (here Site collection owners and site ...
0
votes
2answers
280 views

How to prevent users from getting at the source files for Excel Web Services

I have a request to put a large Excel dataset on a MOSS 2007 sharepoint page. The XLSX is about 13 MB in values alone - about 50,000 rows. It's updated weekly, usually in batch form (i.e. some ...
2
votes
1answer
86 views

How to add security to a page using powershell

I am new to SharePoint and am writing PowerShell scripts to create a number of libraries. Each library will be added as a list webpart on a webpart page for added security. Finally, the page is added ...
0
votes
1answer
46 views

giving access to an entire web application

Im trying to elevate someones permissions so that they can edit and add users etc across all site collections in our farm. I added the user into the farm admins group but it doesnt look like their ...
1
vote
2answers
865 views

Best Practices to make my internet facing portal secure

Ok, so I finished developing my internet site. It uses a federation provider to authenticate public user. Now what I'm concern of, is the site security. I see that any logged in user can see the ...
1
vote
2answers
649 views

I need a Antivirus Scanner for SharePoint 2013

I'm using a Windows 2012 server. With SharePoint server 2013 installed. When I wanted to install Forefront for SharePoint 2010 I get this error. No protectable server applications were detected. ...
0
votes
1answer
112 views

Is there a way to limit viewing permissions of list items based on a property?

I have a custom list which has a property "Department" which is a multi-select checkbox list. So each item in this list can be one of multiple different Departments. I would like to make these items ...
1
vote
0answers
302 views

Steps to deny anonymous access to _vti_pvt directory iis7

The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file What are the steps to deny anonymous access to _vti_pvt ...
0
votes
1answer
69 views

Conditional SPSecurity.RunWithElevatedPrivileges

Is there a way to use SPSecurity.RunWithElevatedPrivileges conditionally. For example, assume that i have a code block, if some condition is met i want to run this code block in ...
0
votes
1answer
431 views

My Site creation failure for user after moving My Sites to dedicated web application

I have created a new web application at port 8080 with the intention of having all personal site creation (i.e. My Sites) stored in a dedicated WSS_Content database (i.e. a best practice ...
0
votes
1answer
54 views

SP2010, are the search index / query component files a risk for highly secure documentation?

Say I have some secure documentation held in SharePoint. Now say the SQL database/BLOB location is encrypted. Enterprise Search is used to crawl this content and therefore the content is indexed. Is ...
3
votes
3answers
3k views

Multiple login prompts are driving users nuts

What are the typical causes of multiple login prompts on sharepoint sites? We have a production site where users who login outside of the domain (from home) are prompted multiple times (3 or so ...
0
votes
1answer
41 views

Accessing word docs on Sharepoint site. Are files cached locally?

My client wants users to access word and excel docs through the company SharePoint site from remote locations, however he does not want them to have access to the files after they have logged off the ...
0
votes
2answers
72 views

Full Control Permission Problem

I am in a group which has Full Permission (site collection owners). However i cant add users to groups that i am not a member off. I thought this would give me full overriding permissions. Am i ...
1
vote
1answer
1k views

How can I add “All Authenticated users” (FBA) to a SharePoint Group using Powershell?

I have an FBA site and I need to add "all authenticated users" to a group using PowerShell. How can I do that?
4
votes
1answer
5k views

Unable to evaluate expression because the code is optimized or a native frame is on top of the call stack

this code thow an exception at "Item.Update();" private void AddEmail() { site = SPContext.Current.Site; web = site.RootWeb; ...
1
vote
1answer
596 views

Get Access to List View webpart without having access to list

So I'm developing an event management system at the moment where there are two user groups, "editors" and "attendees". By registering for an event, the SPUser is added to a list "attendeeList" which ...
4
votes
1answer
258 views

users with Contribute getting 403 forbidden error

This is something I haven't seen in 4 years. Users in SP Group "Accounting" with Contribute access getting 403b forbidden error. It was working fine until this morning. However, I log in as sp admin ...
1
vote
0answers
120 views

Why is AddComment on SocialCommentManager throwing SPException?

When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying "The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
1answer
237 views

SharePoint 2013 S2S Configuration with Exchange

I am trying to configure Site Mailboxes and eDiscovery between SharePoint 2013 and Exchange 2013. The guidance on both of these is pretty much the same, create a server to server trust, then grant ...
1
vote
1answer
989 views

Security For Custom Application Pages

When managing security for any control on a page we use SPSecurityTrimmedControl. But what to do when defining permissions for a custom application page? How do we restrict unauthorized people to ...
0
votes
1answer
32 views

Maintaining role groups and users in two farms simultaneously?

We currently have two farms - a SharePoint 2007 one and a SharePoint 2010 one. We have the same groups in both farms and the same userbase. At the moment when someone joins or leaves the company ...
0
votes
1answer
98 views

Is there a way to list all content deployment jobs on aspx page?

Is there any way to get all local contentdeployment jobs from within web application code? I'm trying to list all jobs on an aspx page in the backend of a site collection, but everytime I execute ...
1
vote
2answers
1k views

How to deny a group to a subsite

I'm using SharePoint 2013 I would to grant acces to a subsite by a specific Active Directory group. And i want to deny all other groups. So the group that's allowed is able to acces the subsite and ...
1
vote
1answer
813 views

Note board Web Part Security Permissions

I have a note board web part sitting on the default.aspx page of a site. I have both farm and site admin rights over the site and against each comment I can see a delete link - both for my own posts ...
0
votes
2answers
2k views

Sharepoint output list of users

I would like to output the users of a group, for 40 groups, or for every group within the SharePoint Portal. I would like to do this programatically through powershell or a command line tool for the ...
0
votes
2answers
359 views

How to remove sharepoint security group in the feature?

I want to remove custom security group from sharepoint 2010. I created custom security group as follows: SPGroup wcmGroup = currentWeb.SiteGroups[permissionName]; SPRoleDefinition ...
2
votes
0answers
109 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
1
vote
1answer
98 views

Sharepoint: Retrieve info on assigned user policy

A question from stackoverflow Case: Create a User Policy in SharePoint 2010 Web Application Management: assign 'Full read' to user XXX for site YYY; Call SiteData.asmx/GetContent for site YYY and ...
1
vote
3answers
355 views

Unable to login to site even though I am administrator of the site collection

I created one site collection and gave the site collection administrator as my name. But when I navigate to that site and try to login that site it is giving me an error that Access Denied. For all ...
0
votes
1answer
93 views

Only give permission to modify/delete a list item to the user that created it

I have created a simple Hyperlink list on which everyone can create, edit and delete items. Now I need to add some more restrictive permissions similar to the following: Only the users that created ...
3
votes
5answers
199 views

Is it possible to create a Blacklist in the usermanagement?

We use a Sharepoint 2010. We want to prevent the Site Administrators assign a specific role (e.g. "Domain\All Users") to a site. So is it possible to create (maybe with custom code), a blacklist for ...
1
vote
0answers
65 views

Is use of PageView web part poses a security risk?

I have two internal web applications in same domain, I want to integrate them within sharepoint using a PageView webpart. Some how the security community of the organization believes it would ...
0
votes
1answer
113 views

sharepoint 2010 hide admin pages

I have several lists on a public facing sharepoint site that are open to the public. These are simple lookup lists and this configuration can't change (not my call). Since users have access to the ...
1
vote
1answer
67 views

SpSecutityTrimmedControl runs in Pagepreview mode - ?pagepreview=true

I'm branding the sharepoint ribbon and need some changes (css) when the page gets in pagepreview mode. I've got this code <SharePoint:SpSecutirtyTrimmedControl runat="server" ...
0
votes
0answers
105 views

Proper way to get all lists of a certain type from an entire site collection regardless of current location

I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal. I'm currently using the following, but can't ...
1
vote
1answer
273 views

Webapp design for internet, intranet and extranet?

I am a beginner in Sharepoint and I must conceive a Sharepoint solution. I need to have an Intranet for employees as well as an access point for collaborators to a particular site in this intranet. ...
0
votes
2answers
95 views

DVWP - Across Multiple Lists with Distinct Permissions

I'm attempting to create a DVWP that merges 4 lists that share a content type schema but have distinct permissions. The issue I am having is that if a user does not have permissions to one of the ...
1
vote
1answer
133 views

Encrypting the search index(es) - any advice?

I have read up on how to configure SQL Server TDE to encrypt SharePoint content that resides in databases, but what about encrypting the search indexes (which reside on the file system)? Does anyone ...
1
vote
3answers
657 views

Changing a SharePoint group Title

What would be the harm of changing the name of a SharePoint group? I have a task list that has the SharePoint groups set in the 'Assigned To' for list items. I'm wondering would be the impact of ...
1
vote
3answers
1k views

401 with ClientContext

I am connecting to SharePoint via managed client api. ClientContext connects to the site and access the list data when I specify the site address as http://computer_name but when I give the configured ...