Security is the protection of information and property from theft.
1
vote
2answers
394 views
Does breaking library/list security inheritance also break it's items inheritance?
We need to break inheritance on a document library. Some users of a site should have read only to document library 1 while some users should have contributor rights to document library 2 (both within ...
2
votes
5answers
2k views
SharePoint 2010: Disable / Hide references to SPSDisco.aspx
I asked this question originally on StackOverflow. I was referred here, so I'll repost:
After upgrading some of our external websites running on SharePoint 2007 to 2010, we ran a link checker to ...
2
votes
2answers
399 views
Prevent Access to Custom Web Application Pages by Non-Admin Users
I have a custom web application that integrates with a SharePoint (MOSS 2007) solution. I would like to add role-based access to pages in this custom web application, with only users in a specified ...
0
votes
2answers
632 views
Sharepoint SPWeb rename - Exception SPException - The security validation for this page is invalid
When attempting an SPWeb rename I receive the following SPException:
Exception SPException - The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and ...
1
vote
3answers
2k views
Are there any free security audit tool for SP?
Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
1
vote
4answers
3k views
Viewing all permissions for a user or AD Group in SharePoint 2007?
Similar to this question is there a similar way to look up permissions for a given user or AD Group? SharePoint 2007 really doesn't work in PowerShell and the Internet didn't yield much here.
2
votes
1answer
142 views
Can I use UAG to isolate my customers' portals on our extranet?
It sounds like the best practice for isolating different customers on an extranet is to use separate site collections for each customer (as is recommended in every answer to this question). If I have ...
1
vote
4answers
527 views
Quick Launch View - Problem
I have designed the quick launch for a SharePoint 2010 site in master page, Now for some pages I do not want the quick launch to show up, (Or better say some SharePoint groups).
So I added a web ...
0
votes
3answers
801 views
Force a Sharepoint Group's landing page
Lets say I have two groups, Group A and Group B.
By default my sites landing page is home .aspx (If I use http://sok1234:456/ It will take me to home.aspx ).
Now my requirement is when a user from B ...
0
votes
1answer
773 views
Unauthorized Access Exception when trying to get site Owner
I get the following exception message:
{"Attempted to perform an unauthorized operation."}
at Microsoft.SharePoint.SPSite.get_Owner()
at MySite.Intranet.QuickLinks.MySiteviewpage.GetSiteOwner()
...
4
votes
1answer
111 views
SharePoint permissions reading from AD
I have a SharePoint sub web with unique permissions, within the site I have 3 SharePoint groups (Owner, Contributor and Viewers), in each of these groups I am including an Active Directory group.
...
0
votes
2answers
304 views
Security for SharePoint 2010 site pages
I have three pages in a SharePoint site. Lets say
A.aspx
B.aspx
C.aspx
I also have two groups - say ALLACCESS and LESSACCESS
now I want
A.aspx page should access only by ALLACCESS, no ...
0
votes
1answer
285 views
Is it possible to create an external content type from WCF service with message security?
I have an external content type that consumes a WCF service. So far it's something simple, over HTTP, no security, just for tests. Here is a sample to get an idea.
Now I'm stepping up a gear and want ...
5
votes
3answers
348 views
Possible to security trim what web parts a user can put on a page?
Basically when you select Insert -> Web Part you get this menu:
Is it possible to determine what is available here based on a users role?
4
votes
2answers
791 views
Make a folder in a document library read only without using security
I have a document library with about 25,000 folders in it, each folder represents a task in our task system and is used as a document repository for those tasks.
Of the 25,000 tasks about 22,000 are ...
1
vote
0answers
38 views
Secure Data from Farm Admins and Database Admins
I am working with a client whose farm admins and database admins may not be approved to view information in one of the site collections due to governmental regulations. Therefore, he would like to ...
0
votes
1answer
176 views
All domain users have full control
On our SharePoint 2010 development server, I noticed that all domain users had full control. On the "Intranet Owners" group, which has Full Control permission level, there are the admin accounts from ...
0
votes
1answer
462 views
Feature Admin tool gives AccessDenied error
I'm using the Feature Admin Tool to discover faulty features on my SharePoint 2010 farm. However, when I click the "Find Faulty Feature in Farm", it throws this error:
---------------------------
An ...
1
vote
1answer
89 views
Design Advice required on SharePoint 2010
I am new to SharePoint
I've a requirement to build Sharepoint 2010 Portal with below specs.
There would be 3 user group
A. Marketing
B. Sales user
C. Admin
Marketing group will upload docs and ...
1
vote
2answers
208 views
SharePoint security configuration best practice (different url for accessing site throught SharePoint designer)
I am trying to improve site security and two options were requested:
Enable SSL (quite obvious)
Set special url in AAM for site administrators (lets say https://admin.spsite.com, usual url looks ...
0
votes
0answers
89 views
Users denied access to certain site collection until an administrator opens it
We are having a problem with users getting "Access denied" errors when trying to access a certain site collection. These users all have the proper permissions to the site and have accessed it in the ...
2
votes
1answer
71 views
Silverlight application privileges
I have a silverlight application which uses the client object model to access the sharepoint server.
When i run the app "out-of-browser" with elevated trust everything works great, but when i try it ...
1
vote
6answers
1k views
Accounts Needed for Installing SharePoint
I am installing SharePoint on my local machine. What accounts are needed to install SharePoint?
It seems ubiquitous that you need the following accounts.
SP_Admin (Account you install SP with)
...
0
votes
1answer
108 views
Prevent editors from inserting web parts
Is it possible to restrict editors from inserting web parts anywhere on a SharePoint 2010 publishing page? This article talks about disabling it for certain parts of the page or hiding the Ribbon ...
3
votes
6answers
475 views
Security around Web Parts
I have been looking to wrap security around web parts. I already have security wrapped around documents so only the correct people see the allowed documents. The problem lies when a user does not ...
1
vote
0answers
431 views
Importing site gives “Security check failed in OnFolderImport” error
I'm using the SharePoint Content Deployment Wizard (2.8 beta) and have successfully exported a site. Now I'm trying to import the site and it gives me the following messages in the log and isn't ...
0
votes
1answer
130 views
Creating a web part to manipulate List Data bypassing List and ListItem security
I have a Tasks List and I need to create a Web Part to display one view of that list (with a functionality similar to a List View Web Part: item viewing, editing, sorting, filtering, etc).
However, ...
1
vote
1answer
70 views
Check object's permission levels
Are there tools that will display all the permissions to an object in SharePoint 2010 Server? For example, we want to see which AD groups, SharePoint groups, and individuals have any level of access ...
1
vote
2answers
310 views
Best practices on Intranet & Extranet
Should these 2 be on same farm (so that deployment is not a big issue or file share)
How is the security managed?
Is there any good article that can help me determine best practice?
2
votes
1answer
312 views
What is neccesary to write to filesystem from a Web Part?
How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages.
The SP2010 app pool is running ...
4
votes
1answer
185 views
What is a good strategy for data masking?
Can anyone recommend a good strategy for data masking in SharePoint 2010?
How do you replicate live data in development and test environment whilst preserving data security and removing sensitive ...
1
vote
1answer
104 views
How to set permissions for SP2010 Server
I'm new to SharePoint 2010 and am creating numerous Publishing sites with workflows, each for a different department. Each department needs to have a few people assigned to be able to create pages, ...
1
vote
1answer
113 views
Can I give a Super User the ability to impersonate someone else?
We currently have a situation where we need the ability to fully impersonate a login on a SharePoint Web Application. Effectively any "SuperUser" needs the ability to, without a password, proxy login ...
0
votes
1answer
3k views
Best practice: Task list item security, so only Assignee & Administrator can change tasks
I'm reading up on Sharepoint and it's security limitations in terms of unique permissions on items within lists (max 2000 per level).
I will have a list/doclib with about ~800 entries, probably with ...
1
vote
1answer
1k views
Sharepoint 2010 security validation error
When i try to add a link to the top nav bar, I am doing this from the cms so not from code. I get the security validation invalid error.
http://img233.imageshack.us/img233/5761/errorcs.png
On the ...
5
votes
2answers
3k views
Why are user permissions set in AD not updated immediately to SharePoint?
I have a SharePoint 2010 Foundation installation on Windows 2008 R2 and SQL Server 2008 and using Claims and Windows authentication.
Subsites are visible only to members of a certain group. However, ...
2
votes
1answer
310 views
User not showing on People page although listed when using Powershell
I'm using SharePoint 2010 (14.0.4763.1000) and have a user that is not showing on the People page (_layouts/people.aspx?MembershipGroupId=3). MembershipGroupId=3 is the Owner's Group.
When using ...
0
votes
1answer
95 views
Permission not recognized by collaboration sub-site
I created a sub-site and disinherited from parent. This sub-site contains two specific permission groups. However, people outside the permission groups can still access the site, albeit with read only ...
1
vote
1answer
362 views
Sharepoint unable to query security group members from AD?
I have a sharepoint environment with multiple domains, access to the site is given on each domain by an AD security group on the remote domain.
The newest domain has a security group that has been ...
5
votes
1answer
259 views
Why can I only login if I use “Sign in as a different user”?
Currently, I can only login directly (in any browser) with members of the Sharepoint Farm Administrators group. However, if I login as one of those administrators then login as a regular domain user I ...
1
vote
2answers
150 views
List Security in Sharepoint
I need to set permissions for a list that looks like this:
I have two different teams, each with a team lead and 3 team members. The team members should not see each others data.
Team leaders have ...
1
vote
1answer
63 views
How to display library permissions to members?
Working on a SP2007 implementation that has a large number of document libraries with custom permissions set, and they have a requirement to give better visibility of who has access to each library. ...
1
vote
0answers
215 views
Editing navigation from site Actions results in error in MOSS 2007
When I or any other user on any machine tries to change the navigation through Site Actions - Modify Navigation, an error occurs stating
"The security validation for this page is invalid. Click ...
2
votes
2answers
413 views
Custom User Control and FIPS Encryption Issues
I have created several custom user controls that I added to the Redering templates of some forms in a custom solution for WSS 3. Most of these templates have codebehind and they all are correctly ...
1
vote
2answers
225 views
sharepoint with FBA, prevent site administrator from viewing content
I would like to set up a site using FBA, where one requirement is that no one other than a few select people have access to data in the site. That would mean that once the site is set up with FBA, ...
0
votes
1answer
68 views
Where to store cryptograhic key for external service
I have a SharePoint 2010 web part that communicates with an external service. The external service provider gave us a secret cryptographic key that we must use to sign our requests. Currently, the key ...
0
votes
2answers
132 views
Publishing delay based on permissions
We are about ready to grant access to outside partners and contractors to a site collection on our main SharePoint site. We would like just these partners and contractors to see everything in the site ...
1
vote
4answers
248 views
Anyone know of a good technical arch diagram or white paper article for SharePoint security?
Anyone know of a good technical arch diagram or white paper article focused SharePoint security?
Mod's, I know this isn't a coding question so feel free to delete it if it violates the rules and I ...
1
vote
2answers
976 views
View PDFs in web browser
When I go to view a PDF on the web, say a 1040 form at the IRS, when I open it it opens in my browser. When I open a PDF file from my sharepoint 2010 instance, however, it prompts me to download the ...
4
votes
2answers
1k views
Best authentication method for accessing sharepoint web from the Internet
We're planning a sharepoint intranet which will be acceded directly from our LAN, however it should be accesible from the Internet, too. What would be the best authentication method available for this ...
