Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
1answer
81 views

Single files permission error (cannot modify/delete)

When I try to modify or delete a file on a subsite I get the "This control is currently disabled" error on the ribbon, and "this item is no longer available" if I try to click on the dropdown-triangle ...
1
vote
4answers
1k views

Access denied - Let me in!

I'm a farm admin I'm a site collection admin I'm a member of <site> Owners Access denied logging in (Windows) What else could it be? FYI, in system.web <authentication mode="Windows" ...
1
vote
2answers
444 views

How to make dropdown link only visible to a certain group of users?

So we have a Management Meeting every two weeks and inside there is confidential information. Basically we want to make it so that link for this site/page is not even visible except to users within a ...
2
votes
1answer
1k views

How to Set Forms Authentication Timeout?

I have a public facing SP2010 site that uses forms authentication (default ASP.NET membership provider). I noticed that The user stays logged in even after hours of inactivity. We need the user to be ...
3
votes
1answer
268 views

SPSecurity.CatchAccessDeniedException = false: Does Sharepoint keep this setting?

When I add SPSecurity.CatchAccessDeniedException = false; this disables the redirection to a login site. Does Sharepoint keep that setting until I set it to "true" or just as long until the object is ...
2
votes
0answers
293 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
2
votes
1answer
104 views

SSRS 2008 and SharePoint integrated mode - security flaw?

Here is my scenario: I've got SSRS 2008 R2 running in integrated mode with SharePoint 2010. Everything works as expected in that I can create data sources, models (either through studio or via the ...
5
votes
2answers
323 views

Unique Permission Issue

This appears to be by design. I have a user who used unique permissions on a subsite and then used unique permissions on a list in the subsite. They then decided to have the subsite inherit ...
0
votes
1answer
289 views

Event Receivers on Add/Remove Users

I need some design ideas for a requirement to audit when uses are added/removed from an object. I need to collect the user doing the add/remove, date time, and reason for adding. I need to do this to ...
0
votes
2answers
515 views

All users in multi tenant environment

I have a problem with authentication in a multi tenant environment. I have a couple of seperate customers which all have their own SharePoint environment within our hosted environment. In the AD, I ...
0
votes
1answer
78 views

Security involved with running a batch file to create Document Libraries

I was wondering what kind of permission levels should a batch have to execute procedures that create programmatically Document Libraries on SharePoint 2010. Has someone done that?
1
vote
3answers
2k views

Sharepoint 2010 web application zones and AAM configuration

Is it possible in Sharepoint 2010 to achieve the following goal: On single Web Application add two urls (through AAM), one is usual http://site.com and another is SSL-enabled https://my.site.com and ...
0
votes
1answer
155 views

Redirecting between zones in MOSS 2007

I have Two zones(Intranet and Internet) for a MOSS Team site.I want something like this When a Intranet(Local AD User) user try to visit Internet zone, he/she should be redirected to the Intranet ...
2
votes
4answers
2k views

Limit users permission in their own my site

we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
1
vote
2answers
718 views

Allow a specific file type to be rendered in iFrame

We've been looking at enabling the Permissive File Handling in Central Admin of our SharePoint 2010 on an intranet site collection. However, we're wondering if we can allow specific file types to be ...
0
votes
2answers
354 views

Is an UpdatePanel a bad decision?

After talking to a few people, and asking around here, I feel like the only way to securely do calls asynchronously is with an updatepanel. (Context: Creating an Upvote/Downvote system on SharePoint ...
5
votes
1answer
1k views

Sharepoint manage trust/add certificate

Hi I try to add a certificate under "central administration>security>manage trust" but I alwas get following error. The Root Certificate that was just selected is invalid. This may be ...
1
vote
0answers
1k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
0
votes
1answer
80 views

Adding/Updating to a SharePoint List with AJAX securely?

I'm creating a Site Definition that will have a Stack Overflow like Q/A system. I'm hung up on the upvote/downvote system. I see a number of ways to do this, but what I think works best is to have ...
0
votes
1answer
142 views

Site Permissions AD Query

When assigning permissions to a site in Sharepoint 2010, is it possible instead of specifically adding a group or a user, to create an LDAP query or something simular. For example I have a group ...
2
votes
2answers
79 views

Should I patch my intranet SharePoint?

SharePoint patching is a hassle and takes a lot of time to test and deploy, My SharePoint is an intranet site (within my organization's premises). Some fellow IT admins advised me to patch only ...
7
votes
1answer
325 views

How does EU Cookie law affects SharePoint Sites?

The Euorpean Union has forced a new cookie law to protect privacy of a user. The full documentation is at Information Commissioner’s Office guidance According to an extract from the above document, ...
8
votes
2answers
2k views

Java to Sharepoint interface, with claims based authentication

I have a sharepoint server with a claims-based authentication (ADFS server). I have a Java app that needs to push data to a sharepoint list, preferably over the REST API, and with the additional ...
2
votes
1answer
119 views

Extending SharePoint groups metadata?

In an application I'm building, I have to create and manage groups based on business rules. Each group must have properties like managers (yes, several managers) and members, with some other ...
7
votes
3answers
2k views

Penetration testing tool for SharePoint

Does anybody know any good penetration testing tools for SharePoint?
0
votes
1answer
339 views

“404 FILE NOT FOUND” on my username entries

In Sharepoint 2010 Central Administration --> Security --> Manage the farm admii nistrator group (Central Administration : Site Settings : People and Groups - Farm Administrators), when I click on my ...
2
votes
3answers
2k views

How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)

Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
1
vote
1answer
2k views

What are the relationship between administrators groups of domain, dev computer and of Sharepoint services?

I know-know I can search and read but anyway I would need to ask in order to escape possible typos, personal misunderstandings and to better remember. I develop on a machine with installed ...
1
vote
1answer
89 views

Cannot read site collection details with some accounts

In my SharePoint environment, I have a few seperate web applications with some different admin users. Now a new user I created is added as local admin (needed for Powershell remoting) and farm admin. ...
6
votes
5answers
1k views

How to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges

Is there a way to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges? class Foo { public static void Bar() { if (CODE_RUNS_ELEVATED) { Debug.WriteLine("You ...
0
votes
1answer
84 views

Right Management Sharepoint

I have a sharepoint list. Users should be able to create new items and change some attributes. I gave full access for the users on the list items. But now I think there is a security gap: what ...
0
votes
2answers
300 views

LINQ to SharePoint and SPUserToken

When creating a new Linq to SharePoint context, normally we don't pass a site object but we provide a request url. So what should I do if I want to execute Linq queries under a different user ...
10
votes
3answers
2k views

Best way to Impersonate in SharePoint

So far, I am aware of below 3 ways of performing impersonation in a SharePoint web part or page : Using Win32 API [DllImport("advapi32.dll", SetLastError=true)] public static extern bool ...
1
vote
3answers
564 views

Item-Level Security Boundaries

Item-Level security boundaries are defined in the Software boundaries document at 1000 items. In the Advanced List Settings you can specify Item-level Permissions to "Create items and edit items that ...
1
vote
1answer
361 views

Get list items even if user does not have access to those items

Is there a way to get items from a list even if the current user does not actually have acces to them? SPSecurity.RunWithElevatedPrivileges does not seem to work! I have a special case in which I ...
9
votes
3answers
940 views

FAST Search Security Trimming of non Windows External Content Types

We have integrated a back-end web application into SharePoint 2010 using the BCS and the OOTB Web Services connector. The data in the backend system is protected by ACLs and we need these ACLs to be ...
1
vote
3answers
3k views

Sharepoint 2010 Item level Permission to a Document Library is Our approach right?

We are planing to apply Item level Permission on document library and want share point experts advise...are we going right way or we will fall in performance issue or others.. What We Have : 1- We ...
2
votes
1answer
518 views

Change List Item Permission via Web Services?

Using web services, is there a way to assign a list item different security than the rest of the list? Lets say I have 3 rows in the list and 2 different groups. 1. A ; Group A & B can see ...
0
votes
1answer
120 views

Is AddAndCustomizePages only available at site level?

I've read this forum entry which states that it is not possible to have AddAndCustomizePages work at lower than I site level. I have .aspx pages in a folder and I would like my SharePoint group to ...
0
votes
1answer
2k views

User Profile Application Proxy failed to retrieve partitions from User profile application - Cant access application either

I am experiancing an issue where ever so often the sharepoint (2010) site keeps throwing security errors(The security validation for this page is invalid) iisreset fixes this shortly but ...
0
votes
1answer
295 views

SpServices Cannot Get Sub-Sites without Being Site Collection Admin

I am building a web part which is delegated by permissions. It is displayling members of the Members group and Owners group onto the page, and if a user does not have Members or Owners permissions, ...
0
votes
3answers
426 views

Access Denied for SPUserCollection.remove()

Works for administrator but not working for a normal user. I even tried it with "SPSecurity.RunWithElevatedPrivileges(delegate() {});" after breaking RoleInheritance, and even tried ...
0
votes
1answer
142 views

How to prevent members of a certain group from filling out, submitting or even viewing a form?

Lets say I have a few users in a group called "Restricted" and I don't want them to be able to view or submit forms. Should I add some code in the Form_Loading event that checks what groups the ...
1
vote
0answers
397 views

Get Permissions with client object model

i want to add a permission on a folder who's inside a document library with javascript/jquery/client object model. The problem i have is, its a custom permission level created when some feature is ...
1
vote
1answer
423 views

Javascript, cannot complete this action

i am currently running some code on a sharepoint front end and am getting this error "Microsoft.SharePoint.SPException" "Cannot complete this action.\n\nPlease try again." So i looked into this and ...
1
vote
1answer
1k views

Security on Document Library's item

i need to add some security to a Document Library, i want to be able to have multiple folders and multiple documents. This feature would provide users with proper right to modify, read, hide documents ...
2
votes
1answer
1k views

EnsureUser throws The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your operation again

I have this code: The EnsureUser Line is throwing me that exception, any idea? The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your ...
0
votes
3answers
1k views

Securing SharePoint for External Access

We are exploring the possibility of making our Intranet available to our employees outside of our network (and not over VPN). Besides firewalls/forward proxies and such (like the Threat Management ...
0
votes
2answers
808 views

Sharepoint Security issue in _layouts/user.aspx

Considering the following scenario : - create a SharePoint site collection - create a new security permission level "Test", with "Manage permissions" checked. - create a new Group, with "Contribute", ...
0
votes
2answers
4k views

Stop inheriting permissions programatically

I want to set read permissions to some sharepoint groups to a list. For existing sites I did it manually, Stop Inherit permissions. Then on groups I chose the groups and edited their permissions, ...