Security is the protection of information and property from theft.
1
vote
6answers
1k views
Accounts Needed for Installing SharePoint
I am installing SharePoint on my local machine. What accounts are needed to install SharePoint?
It seems ubiquitous that you need the following accounts.
SP_Admin (Account you install SP with)
...
1
vote
3answers
1k views
Sharepoint 2010 web application zones and AAM configuration
Is it possible in Sharepoint 2010 to achieve the following goal:
On single Web Application add two urls (through AAM), one is usual http://site.com and another is SSL-enabled https://my.site.com and ...
9
votes
3answers
794 views
FAST Search Security Trimming of non Windows External Content Types
We have integrated a back-end web application into SharePoint 2010 using the BCS and the OOTB Web Services connector.
The data in the backend system is protected by ACLs and we need these ACLs to be ...
1
vote
2answers
207 views
SharePoint security configuration best practice (different url for accessing site throught SharePoint designer)
I am trying to improve site security and two options were requested:
Enable SSL (quite obvious)
Set special url in AAM for site administrators (lets say https://admin.spsite.com, usual url looks ...
2
votes
1answer
705 views
How do I remove all users from an SPGroup object?
I have an SPGroup object populated, how can I remove all members from the group, so that essentially I start with a fresh group.
I can't delete and recreate it, so I need a way to work with the ...
1
vote
1answer
89 views
Design Advice required on SharePoint 2010
I am new to SharePoint
I've a requirement to build Sharepoint 2010 Portal with below specs.
There would be 3 user group
A. Marketing
B. Sales user
C. Admin
Marketing group will upload docs and ...
0
votes
1answer
108 views
Prevent editors from inserting web parts
Is it possible to restrict editors from inserting web parts anywhere on a SharePoint 2010 publishing page? This article talks about disabling it for certain parts of the page or hiding the Ribbon ...
1
vote
0answers
428 views
Importing site gives “Security check failed in OnFolderImport” error
I'm using the SharePoint Content Deployment Wizard (2.8 beta) and have successfully exported a site. Now I'm trying to import the site and it gives me the following messages in the log and isn't ...
0
votes
1answer
130 views
Creating a web part to manipulate List Data bypassing List and ListItem security
I have a Tasks List and I need to create a Web Part to display one view of that list (with a functionality similar to a List View Web Part: item viewing, editing, sorting, filtering, etc).
However, ...
3
votes
6answers
474 views
Security around Web Parts
I have been looking to wrap security around web parts. I already have security wrapped around documents so only the correct people see the allowed documents. The problem lies when a user does not ...
1
vote
1answer
70 views
Check object's permission levels
Are there tools that will display all the permissions to an object in SharePoint 2010 Server? For example, we want to see which AD groups, SharePoint groups, and individuals have any level of access ...
1
vote
2answers
310 views
Best practices on Intranet & Extranet
Should these 2 be on same farm (so that deployment is not a big issue or file share)
How is the security managed?
Is there any good article that can help me determine best practice?
2
votes
1answer
312 views
What is neccesary to write to filesystem from a Web Part?
How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages.
The SP2010 app pool is running ...
5
votes
2answers
291 views
Unique Permission Issue
This appears to be by design. I have a user who used unique permissions on a subsite and then used unique permissions on a list in the subsite. They then decided to have the subsite inherit ...
1
vote
1answer
103 views
How to set permissions for SP2010 Server
I'm new to SharePoint 2010 and am creating numerous Publishing sites with workflows, each for a different department. Each department needs to have a few people assigned to be able to create pages, ...
4
votes
1answer
185 views
What is a good strategy for data masking?
Can anyone recommend a good strategy for data masking in SharePoint 2010?
How do you replicate live data in development and test environment whilst preserving data security and removing sensitive ...
0
votes
2answers
258 views
LINQ to SharePoint and SPUserToken
When creating a new Linq to SharePoint context, normally we don't pass a site object but we provide a request url.
So what should I do if I want to execute Linq queries under a different user ...
1
vote
1answer
113 views
Can I give a Super User the ability to impersonate someone else?
We currently have a situation where we need the ability to fully impersonate a login on a SharePoint Web Application. Effectively any "SuperUser" needs the ability to, without a password, proxy login ...
1
vote
1answer
1k views
Sharepoint 2010 security validation error
When i try to add a link to the top nav bar, I am doing this from the cms so not from code. I get the security validation invalid error.
http://img233.imageshack.us/img233/5761/errorcs.png
On the ...
1
vote
1answer
361 views
Sharepoint unable to query security group members from AD?
I have a sharepoint environment with multiple domains, access to the site is given on each domain by an AD security group on the remote domain.
The newest domain has a security group that has been ...
1
vote
2answers
149 views
List Security in Sharepoint
I need to set permissions for a list that looks like this:
I have two different teams, each with a team lead and 3 team members. The team members should not see each others data.
Team leaders have ...
1
vote
0answers
215 views
Editing navigation from site Actions results in error in MOSS 2007
When I or any other user on any machine tries to change the navigation through Site Actions - Modify Navigation, an error occurs stating
"The security validation for this page is invalid. Click ...
1
vote
1answer
63 views
How to display library permissions to members?
Working on a SP2007 implementation that has a large number of document libraries with custom permissions set, and they have a requirement to give better visibility of who has access to each library. ...
5
votes
1answer
259 views
Why can I only login if I use “Sign in as a different user”?
Currently, I can only login directly (in any browser) with members of the Sharepoint Farm Administrators group. However, if I login as one of those administrators then login as a regular domain user I ...
1
vote
3answers
637 views
401 with ClientContext
I am connecting to SharePoint via managed client api. ClientContext connects to the site and access the list data when I specify the site address as http://computer_name but when I give the configured ...
1
vote
2answers
971 views
View PDFs in web browser
When I go to view a PDF on the web, say a 1040 form at the IRS, when I open it it opens in my browser. When I open a PDF file from my sharepoint 2010 instance, however, it prompts me to download the ...
1
vote
4answers
248 views
Anyone know of a good technical arch diagram or white paper article for SharePoint security?
Anyone know of a good technical arch diagram or white paper article focused SharePoint security?
Mod's, I know this isn't a coding question so feel free to delete it if it violates the rules and I ...
0
votes
2answers
132 views
Publishing delay based on permissions
We are about ready to grant access to outside partners and contractors to a site collection on our main SharePoint site. We would like just these partners and contractors to see everything in the site ...
4
votes
2answers
1k views
Best authentication method for accessing sharepoint web from the Internet
We're planning a sharepoint intranet which will be acceded directly from our LAN, however it should be accesible from the Internet, too. What would be the best authentication method available for this ...
2
votes
2answers
1k views
How effective is locking down _vti_bin
I've come across a roadblock where the maintainer of the Sharepoint installation has restricted access to the _vti_bin folder (i.e. denied for all users). I am using SPservices to access the ...
3
votes
1answer
2k views
Anonymous access = huge web services security hole?
My company uses SharePoint for their public website by allowing anonymous access. Some of our lists and document libraries have permissions to only allow certain users to be able to access them. I'm ...
1
vote
1answer
2k views
How do I export site security groups and memberships with PowerShell?
I'm looking for a PowerShell script (or tool) to export a site's groups and group memberships to a text file.
These files would be used as backup for the current security configuration in case the ...
1
vote
1answer
165 views
Read configuration section in WebApplication scoped code with CAS
I'm testing some code here, trying to get it to work with CAS. I have a configuration file at a file location with some WCF definitions. I load this code with:
var config = ...
0
votes
2answers
114 views
Different security for foms and lists?
Is it possible to have security so that anyone can fill out a form, but only a small amount of people can see the underlying list? We are implementing an form that can contain sensitive information ...
0
votes
2answers
3k views
target audience not working as expected with site group
In my SP2010 farm, I have :
one domain group "AD Group"
the group have domain\user2 as a member
one site group "SP group" with the following members
AD group
domain\user1
On the home page, I ...
5
votes
2answers
3k views
Why are user permissions set in AD not updated immediately to SharePoint?
I have a SharePoint 2010 Foundation installation on Windows 2008 R2 and SQL Server 2008 and using Claims and Windows authentication.
Subsites are visible only to members of a certain group. However, ...
2
votes
3answers
729 views
How do I find out what a group has permission to?
I'm cleaning up a farm that has loads of junk groups on it. Is there an easy way to tell if any of these groups have been assigned access to anything? The intention is to delete groups that have ...
2
votes
1answer
310 views
User not showing on People page although listed when using Powershell
I'm using SharePoint 2010 (14.0.4763.1000) and have a user that is not showing on the People page (_layouts/people.aspx?MembershipGroupId=3). MembershipGroupId=3 is the Owner's Group.
When using ...
4
votes
3answers
4k views
How to get a web.config file in a sharepoint 2010 publishing site?
I am working on a sharepoint 2010 project and I noticed in the soultion their is no web.config.
I asked one of my fellow co-workers and he mentioned something about we don't have access to to it as ...
3
votes
3answers
1k views
Unable to modify SPWebApplication properties from feature receiver - Access Denied
The scope of the feature is Web.
SPWeb site = (SPWeb)properties.Feature.Parent;
site.AllowUnsafeUpdates = true;
// Set the Web Application's default error page
SPSite siteCollection = new ...
2
votes
1answer
183 views
Which accounts should be managed accounts?
Three questions on a theme...
Which accounts should be managed accounts?
Or perhaps to put it another way, which services / things are best to have as managed accounts?
Or perhaps the opposite ...
1
vote
1answer
233 views
Why does the central admin requires to run in IE with elevated privileges?
As described here : http://blogs.msdn.com/b/jorman/archive/2010/07/10/missing-links-or-access-denied-in-central-admin-sharepoint-2010.aspx, I have to run with an elevated IE to get all actions.
What ...
3
votes
3answers
1k views
How do you allow Content Authors to add Javascript to a Publishing Page?
We have an internet-facing, SharePoint 2010, Publishing Site. The content authors that maintain the site are JavaScript savvy web designers. They would like to be able to add JavaScript to publishing ...
3
votes
4answers
2k views
Why is SharePoint_Shell_Access permission required to run SharePoint powershell?
So we're setting up a SharePoint farm and it seems our admin accounts require access SharePoint_Shell_Access role on SQL.
http://technet.microsoft.com/en-us/library/ee806878.aspx
...
1
vote
2answers
375 views
How to manage the security on the list?
How do I manage the security on a list so one group of users can modify all the fields of an item and one group users can only modify some of the fields?
5
votes
5answers
2k views
User Accounts Disappearing From SP Groups
We've been running into a bizarre scenario and I'm at a complete loss.
I'm a site collection admin for my division's portal. We're on a shared internal company-wide MOSS server, and I have no access ...
1
vote
1answer
592 views
How do you register web.config changes to SharePoint service applications, they way you can for web applications?
The SPWebConfigModification class can be used for updating content web applications and also central administration. This can be applied to the SPWebApplication and also SPWebService classes. ...
0
votes
2answers
178 views
Is it possible to grant security roles through an event receiver?
I have a requirement to grant a department contribute to their department parent & child sites. The catch is, they also want to be able to grant & remove contribute to outside department ...
2
votes
0answers
611 views
Page History/Page Permissions exceptions (BreakInheritance(false, false)) [closed]
I'm experiencing a serious problem (SharePoint 2010) I want to share with you. Steps to reproduce it:
Create a Web application.
Create a site collection inside the Web application previously ...
2
votes
2answers
1k views
How to create a “datasheet-like” list view to update a checkbox in multiple rows?
I am using draft item security on a forms library to only allow the creator of a form and a user with "edit items" permissions to view a form in the library.
I would like to provide the user with ...
