Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
4answers
7k views

Viewing all permissions for a user or AD Group in SharePoint 2007?

Similar to this question is there a similar way to look up permissions for a given user or AD Group? SharePoint 2007 really doesn't work in PowerShell and the Internet didn't yield much here.
1
vote
2answers
222 views

How to remove same session value for different sessions?

I received an error from the Security testing team as follows: It was observed that same session value is used for different sessions. After logout, session value should be cleared and the user ...
1
vote
6answers
2k views

Accounts Needed for Installing SharePoint

I am installing SharePoint on my local machine. What accounts are needed to install SharePoint? It seems ubiquitous that you need the following accounts. SP_Admin (Account you install SP with) ...
1
vote
3answers
1k views

Sharepoint 2010 web application zones and AAM configuration

Is it possible in Sharepoint 2010 to achieve the following goal: On single Web Application add two urls (through AAM), one is usual http://site.com and another is SSL-enabled https://my.site.com and ...
1
vote
1answer
1k views

Sharepoint 2010 security validation error

When i try to add a link to the top nav bar, I am doing this from the cms so not from code. I get the security validation invalid error. http://img233.imageshack.us/img233/5761/errorcs.png On the ...
1
vote
1answer
86 views

How to display library permissions to members?

Working on a SP2007 implementation that has a large number of document libraries with custom permissions set, and they have a requirement to give better visibility of who has access to each library. ...
1
vote
3answers
1k views

401 with ClientContext

I am connecting to SharePoint via managed client api. ClientContext connects to the site and access the list data when I specify the site address as http://computer_name but when I give the configured ...
1
vote
1answer
186 views

Read configuration section in WebApplication scoped code with CAS

I'm testing some code here, trying to get it to work with CAS. I have a configuration file at a file location with some WCF definitions. I load this code with: var config = ...
1
vote
2answers
5k views

target audience not working as expected with site group

In my SP2010 farm, I have : one domain group "AD Group" the group have domain\user2 as a member one site group "SP group" with the following members AD group domain\user1 On the home page, I ...
1
vote
1answer
787 views

How do you register web.config changes to SharePoint service applications, they way you can for web applications?

The SPWebConfigModification class can be used for updating content web applications and also central administration. This can be applied to the SPWebApplication and also SPWebService classes. ...
1
vote
1answer
292 views

Sharepoint Security Trim control & its permission

We have a Custom List in SharePoint 2007, all authenticated users are allowed to add a new item into it. Now, we have a page on which we are displaying the item details and it will be accessible for ...
1
vote
1answer
296 views

Sharepoint user security best practices question

I am new to the realm of Sharepoint. I am wondering if there is a best-practice for setting up user accounts for Sharepoint. We will be having employees of our company, as well as clients, ...
1
vote
3answers
1k views

Programatically adding SharePoint groups to Group Quicklaunch

I'm programatically creating a new site with associated groups (Owners, Members etc) in MOSS 2007 When the site is created, and groups associated with the site, the groups don't appear in the Groups ...
1
vote
1answer
203 views

How to set permissions such that users can add, edit, and delete list/library items, but cannot edit web part pages or delete web part pages?

I need the ability for users to add, edit, and delete lists/libraries but not have the ability to edit web part pages or delete web part pages. I am boggled that the Edit Items permission allows for ...
1
vote
2answers
255 views

sharepoint with FBA, prevent site administrator from viewing content

I would like to set up a site using FBA, where one requirement is that no one other than a few select people have access to data in the site. That would mean that once the site is set up with FBA, ...
1
vote
2answers
101 views

Item Permission based on Nationality

I am trying to restrict access to items in a library based on the users nationality. We have contracts that can be viewed by certain nationalities and not by others. I hit a problem if the user has a ...
1
vote
4answers
474 views

Managing different groups of users within same site collection

We need to use WSS for different groups of clients and wondered if there is a way to seperate different groups of users, to prevent them from ever seeing each others details. An example of when this ...
1
vote
1answer
165 views

Securing a forms Authentication Internet site

I have an internet site using MOSS 2007/win 2008/SQL 2005. Users are authenticated using forms authentication. All authenticated users are able to browse pages like: ...
1
vote
2answers
1k views

Security warning for JavaScript and CSS file?

I am using SharePoint Server 2007 Enterprise with Windows Server 2008 Enterprise. And I am developing using VSTS 2008 + C# + .Net 3.5 + ASP.Net + JavaScript (jQuery). I met with the following ...
1
vote
0answers
15 views

Item permissions changed

I have a question because i cant explain why something happend. Suddenly the item permissions on several items are changed. An AD group is gone as a permissions group and instead i see the ...
1
vote
1answer
20 views

Can I set alerts for an AD group without having exchange?

We have our security groups coming from AD on the AD import. A user wants to set an alert on a list to notify the group when something changes. The group is a global security group. I can set the ...
1
vote
2answers
12 views

Security and backup if documents in library are not synced

Is there any reason why I would not want to store all of my business documents and not sync them? Should I have any concerns about security or losing data? I don't need to have my documents synced ...
1
vote
1answer
130 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
1
vote
0answers
22 views

Allow access to enter data , but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
1
vote
1answer
38 views

Different URLS for different auth providers, under one web application and site collection

We have a single site collection setup within a web application. The site collection has one top-level site, and the setup has one content database. The application is using Forms authentication for ...
1
vote
0answers
31 views

SharePoint setup where admin has no access to data

We have a customer who want's to store sensitive data on SharePoint which should only be accessed from a few members of the company. This would be no problem with SharePoint group policies, but we ...
1
vote
1answer
62 views

Security Exception when calling WCF Service from Sharepoint 2013 Visual webpart

Want to call WCF service from Sharepoint 2013 Visual Web Part; when using this Service from Console it works perfectly. I receive following Security Exception when using svc from webpart: Request ...
1
vote
0answers
107 views

Data Refresh Account - Login Failure: the user has not been granted the requested logon type at this computer

I am trying to configure my Unattended Data Refresh Account and continue to get the following error with the account I am using: The data refresh for 'sqltestrefresh.xlsx' on Report Center - QA ...
1
vote
1answer
33 views

Managing Site Permissions

I am new to SharePoint and having some difficulty setting up the appropriate permissions. My organization uses a primary landing page that only a few have Owner/Full Control rights to, and then that ...
1
vote
1answer
38 views

system security error when running Sharepoint 2010 Products Configuration Wizard

Background: A few months ago, my company had an issue which resulted in creating a new domain, and migrating all computers and servers to the new domain, including a Sharepoint 2010 installation. At ...
1
vote
1answer
25 views

HR Libraries Scenario >> Employee libraries and security via AD

We have a scenario in 2013 where we are proposing a library per employee to hold HR documents. We'd have a dropoff library that would route the document to the proper library which is based off the ...
1
vote
1answer
113 views

How to configure security (IIS, token, etc.) for a website that uses SharePoint 2013 REST API?

I have a website that uses the SharePoint 2013 REST API to render list data (via JQuery AJAX) on the website. It is pretty straightforward and works fine, but my challenge is figuring out the security ...
1
vote
1answer
74 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
1
vote
0answers
16 views

Control all user traffic to Sharepoint Online

We are working on a gateway solution aimed for Sharepoint Online to control all user traffic and possibly, do changes on requests and responses. Is there any way to enforce/limit connections to ...
1
vote
1answer
134 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
1
vote
1answer
2k views

The remote server returned an error: (401) Unauthorized. on new App

I created a new app by following this tutorial http://blogs.msdn.com/b/bspann/archive/2013/01/19/asp-net-mvc-based-apps-for-sharepoint-2013-on-premises.aspx I was able to press F5 and it showed me ...
1
vote
1answer
85 views

Strange SharePoint behaviour regarding “Check Permissions” in a web part

I have a web part in which I am displaying users from User Profile Service which is synced with AD. In my code I get all the users in current site and then see if they are part of any group. If they ...
1
vote
0answers
29 views

Fine-tuning SP2013 Document Library permissions

I have the need to give access to a role for creating documents and folders in a document library and giving access to another role to create documents (but not folders) How would I go about doing ...
1
vote
0answers
112 views

FBA Custom login page to use 2 factor authentication - simplified

User provides an username/password. Should validate those and only then proceed to step 2. User provides an additional authentication token. If succeeds user is authenticated against SharePoint and ...
1
vote
1answer
252 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
1
vote
0answers
28 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
1
vote
0answers
35 views

In SharePoint 2013 is there a security group that allows full access to all content in a farm by default?

I'm setting up a SharePoint 2013 development server and I've added my account to the Farm Admin group. In prior versions this meant that I had access to all content in the farm by default. It looks ...
1
vote
0answers
210 views

How to restrict access to edit attachments in lists?

We have Windows SharePoint Services 3.0 SP 3 (12.0.0.6608 from CA) on Windows 2003 Server R2 EE. In the main we use our WSS as sort of book of problems. And by book of problems, i mean that there is ...
1
vote
1answer
113 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
1
vote
1answer
1k views

Call SharePoint custom WCF service from within same SharePoint site

I've built a custom WCF web service that is hosted on a SharePoint server. The service combined SharePoint data with data from a separate database. The service can successfully be called from a ...
1
vote
0answers
29 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...
1
vote
0answers
384 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
1
vote
1answer
92 views

Default Security Groups on Site Creation from Web Service

I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
1
vote
2answers
707 views

Is it possible to add a security trim that filters by user groups?

In my left hand side bar I have 3 links to downloads- one for each of three different companies. I need each company to log in and see only the one link to their companies downloads - not all 3 links ...
1
vote
0answers
122 views

Why is AddComment on SocialCommentManager throwing SPException?

When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying "The security validation for this page is invalid. Click Back in your Web browser, ...