Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
2answers
553 views

How to deny a group to a subsite

I'm using SharePoint 2013 I would to grant acces to a subsite by a specific Active Directory group. And i want to deny all other groups. So the group that's allowed is able to acces the subsite and ...
1
vote
1answer
574 views

Note board Web Part Security Permissions

I have a note board web part sitting on the default.aspx page of a site. I have both farm and site admin rights over the site and against each comment I can see a delete link - both for my own posts ...
0
votes
2answers
2k views

Sharepoint output list of users

I would like to output the users of a group, for 40 groups, or for every group within the SharePoint Portal. I would like to do this programatically through powershell or a command line tool for the ...
0
votes
2answers
263 views

How to remove sharepoint security group in the feature?

I want to remove custom security group from sharepoint 2010. I created custom security group as follows: SPGroup wcmGroup = currentWeb.SiteGroups[permissionName]; SPRoleDefinition ...
2
votes
0answers
103 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
1
vote
1answer
83 views

Sharepoint: Retrieve info on assigned user policy

A question from stackoverflow Case: Create a User Policy in SharePoint 2010 Web Application Management: assign 'Full read' to user XXX for site YYY; Call SiteData.asmx/GetContent for site YYY and ...
1
vote
3answers
243 views

Unable to login to site even though I am administrator of the site collection

I created one site collection and gave the site collection administrator as my name. But when I navigate to that site and try to login that site it is giving me an error that Access Denied. For all ...
0
votes
1answer
79 views

Only give permission to modify/delete a list item to the user that created it

I have created a simple Hyperlink list on which everyone can create, edit and delete items. Now I need to add some more restrictive permissions similar to the following: Only the users that created ...
2
votes
5answers
152 views

Is it possible to create a Blacklist in the usermanagement?

We use a Sharepoint 2010. We want to prevent the Site Administrators assign a specific role (e.g. "Domain\All Users") to a site. So is it possible to create (maybe with custom code), a blacklist for ...
1
vote
0answers
56 views

Is use of PageView web part poses a security risk?

I have two internal web applications in same domain, I want to integrate them within sharepoint using a PageView webpart. Some how the security community of the organization believes it would ...
0
votes
1answer
108 views

sharepoint 2010 hide admin pages

I have several lists on a public facing sharepoint site that are open to the public. These are simple lookup lists and this configuration can't change (not my call). Since users have access to the ...
1
vote
1answer
63 views

SpSecutityTrimmedControl runs in Pagepreview mode - ?pagepreview=true

I'm branding the sharepoint ribbon and need some changes (css) when the page gets in pagepreview mode. I've got this code <SharePoint:SpSecutirtyTrimmedControl runat="server" ...
0
votes
0answers
85 views

Proper way to get all lists of a certain type from an entire site collection regardless of current location

I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal. I'm currently using the following, but can't ...
1
vote
1answer
254 views

Webapp design for internet, intranet and extranet?

I am a beginner in Sharepoint and I must conceive a Sharepoint solution. I need to have an Intranet for employees as well as an access point for collaborators to a particular site in this intranet. ...
0
votes
2answers
91 views

DVWP - Across Multiple Lists with Distinct Permissions

I'm attempting to create a DVWP that merges 4 lists that share a content type schema but have distinct permissions. The issue I am having is that if a user does not have permissions to one of the ...
1
vote
1answer
108 views

Encrypting the search index(es) - any advice?

I have read up on how to configure SQL Server TDE to encrypt SharePoint content that resides in databases, but what about encrypting the search indexes (which reside on the file system)? Does anyone ...
1
vote
3answers
357 views

Changing a SharePoint group Title

What would be the harm of changing the name of a SharePoint group? I have a task list that has the SharePoint groups set in the 'Assigned To' for list items. I'm wondering would be the impact of ...
1
vote
3answers
994 views

401 with ClientContext

I am connecting to SharePoint via managed client api. ClientContext connects to the site and access the list data when I specify the site address as http://computer_name but when I give the configured ...
1
vote
1answer
177 views

Authentication - multiple web domains

We use claims based authentication and have one application running, say www.abc.com This application authenticates against AD via claimns provider. We would like to deploy another web site: ...
0
votes
3answers
5k views

removing NT AUTHORITY\authenticated users vs all authenticated users and adding domain group instead

I have a root site collection and under the "Style Resources Readers group" i have the NT AUTHORITY\authenticated and the all authenticated users . Are these the same groups but with different ...
1
vote
2answers
205 views

How to remove same session value for different sessions?

I received an error from the Security testing team as follows: It was observed that same session value is used for different sessions. After logout, session value should be cleared and the user ...
1
vote
1answer
731 views

Dissappearing SharePoint Groups

SharePoint groups started to disappear- totally randomly, within a single site collection. I am pretty sure they are not deleted because we have few site collection admins with knowledge. like this: ...
0
votes
1answer
111 views

sharepoint 2010: revoke rights to see “users and permissions”

I have a sharepoint site and i want few users not to see "Users and Permissions" in 'site settings'. It should not disturb anything else. Please help me.
0
votes
1answer
55 views

SharePoint 2010: Site security

I have Site collection (http://myapp/sites/sitcol) and i have two site in that site collections i.e root site (http://myapp/sites/sitcol/) and site2 (http://myapp/sites/sitcol/site2). i have two ...
1
vote
1answer
472 views

Add solution from within event receiver - how to sort out “access denied” errors?

I'm handling the WebProvisioned event in order to add and deploy a solution that's relevant to the site being created. The solution is being created dynamically based on parameters of the site but for ...
0
votes
1answer
83 views

Single files permission error (cannot modify/delete)

When I try to modify or delete a file on a subsite I get the "This control is currently disabled" error on the ribbon, and "this item is no longer available" if I try to click on the dropdown-triangle ...
1
vote
4answers
1k views

Access denied - Let me in!

I'm a farm admin I'm a site collection admin I'm a member of <site> Owners Access denied logging in (Windows) What else could it be? FYI, in system.web <authentication mode="Windows" ...
1
vote
2answers
510 views

How to make dropdown link only visible to a certain group of users?

So we have a Management Meeting every two weeks and inside there is confidential information. Basically we want to make it so that link for this site/page is not even visible except to users within a ...
4
votes
1answer
1k views

How to Set Forms Authentication Timeout?

I have a public facing SP2010 site that uses forms authentication (default ASP.NET membership provider). I noticed that The user stays logged in even after hours of inactivity. We need the user to be ...
3
votes
1answer
310 views

SPSecurity.CatchAccessDeniedException = false: Does Sharepoint keep this setting?

When I add SPSecurity.CatchAccessDeniedException = false; this disables the redirection to a login site. Does Sharepoint keep that setting until I set it to "true" or just as long until the object is ...
2
votes
0answers
316 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
2
votes
1answer
115 views

SSRS 2008 and SharePoint integrated mode - security flaw?

Here is my scenario: I've got SSRS 2008 R2 running in integrated mode with SharePoint 2010. Everything works as expected in that I can create data sources, models (either through studio or via the ...
5
votes
2answers
334 views

Unique Permission Issue

This appears to be by design. I have a user who used unique permissions on a subsite and then used unique permissions on a list in the subsite. They then decided to have the subsite inherit ...
0
votes
2answers
563 views

All users in multi tenant environment

I have a problem with authentication in a multi tenant environment. I have a couple of seperate customers which all have their own SharePoint environment within our hosted environment. In the AD, I ...
0
votes
1answer
84 views

Security involved with running a batch file to create Document Libraries

I was wondering what kind of permission levels should a batch have to execute procedures that create programmatically Document Libraries on SharePoint 2010. Has someone done that?
1
vote
3answers
2k views

Sharepoint 2010 web application zones and AAM configuration

Is it possible in Sharepoint 2010 to achieve the following goal: On single Web Application add two urls (through AAM), one is usual http://site.com and another is SSL-enabled https://my.site.com and ...
0
votes
1answer
157 views

Redirecting between zones in MOSS 2007

I have Two zones(Intranet and Internet) for a MOSS Team site.I want something like this When a Intranet(Local AD User) user try to visit Internet zone, he/she should be redirected to the Intranet ...
2
votes
4answers
3k views

Limit users permission in their own my site

we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
1
vote
2answers
780 views

Allow a specific file type to be rendered in iFrame

We've been looking at enabling the Permissive File Handling in Central Admin of our SharePoint 2010 on an intranet site collection. However, we're wondering if we can allow specific file types to be ...
0
votes
2answers
379 views

Is an UpdatePanel a bad decision?

After talking to a few people, and asking around here, I feel like the only way to securely do calls asynchronously is with an updatepanel. (Context: Creating an Upvote/Downvote system on SharePoint ...
5
votes
1answer
1k views

Sharepoint manage trust/add certificate

Hi I try to add a certificate under "central administration>security>manage trust" but I alwas get following error. The Root Certificate that was just selected is invalid. This may be ...
0
votes
1answer
82 views

Adding/Updating to a SharePoint List with AJAX securely?

I'm creating a Site Definition that will have a Stack Overflow like Q/A system. I'm hung up on the upvote/downvote system. I see a number of ways to do this, but what I think works best is to have ...
0
votes
1answer
148 views

Site Permissions AD Query

When assigning permissions to a site in Sharepoint 2010, is it possible instead of specifically adding a group or a user, to create an LDAP query or something simular. For example I have a group ...
2
votes
2answers
80 views

Should I patch my intranet SharePoint?

SharePoint patching is a hassle and takes a lot of time to test and deploy, My SharePoint is an intranet site (within my organization's premises). Some fellow IT admins advised me to patch only ...
7
votes
1answer
343 views

How does EU Cookie law affects SharePoint Sites?

The Euorpean Union has forced a new cookie law to protect privacy of a user. The full documentation is at Information Commissioner’s Office guidance According to an extract from the above document, ...
2
votes
1answer
126 views

Extending SharePoint groups metadata?

In an application I'm building, I have to create and manage groups based on business rules. Each group must have properties like managers (yes, several managers) and members, with some other ...
7
votes
3answers
2k views

Penetration testing tool for SharePoint

Does anybody know any good penetration testing tools for SharePoint?
0
votes
1answer
368 views

“404 FILE NOT FOUND” on my username entries

In Sharepoint 2010 Central Administration --> Security --> Manage the farm admii nistrator group (Central Administration : Site Settings : People and Groups - Farm Administrators), when I click on my ...
1
vote
1answer
2k views

What are the relationship between administrators groups of domain, dev computer and of Sharepoint services?

I know-know I can search and read but anyway I would need to ask in order to escape possible typos, personal misunderstandings and to better remember. I develop on a machine with installed ...
1
vote
1answer
91 views

Cannot read site collection details with some accounts

In my SharePoint environment, I have a few seperate web applications with some different admin users. Now a new user I created is added as local admin (needed for Powershell remoting) and farm admin. ...