Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
3answers
926 views

401 with ClientContext

I am connecting to SharePoint via managed client api. ClientContext connects to the site and access the list data when I specify the site address as http://computer_name but when I give the configured ...
1
vote
2answers
1k views

View PDFs in web browser

When I go to view a PDF on the web, say a 1040 form at the IRS, when I open it it opens in my browser. When I open a PDF file from my sharepoint 2010 instance, however, it prompts me to download the ...
1
vote
4answers
283 views

Anyone know of a good technical arch diagram or white paper article for SharePoint security?

Anyone know of a good technical arch diagram or white paper article focused SharePoint security? Mod's, I know this isn't a coding question so feel free to delete it if it violates the rules and I ...
0
votes
2answers
173 views

Publishing delay based on permissions

We are about ready to grant access to outside partners and contractors to a site collection on our main SharePoint site. We would like just these partners and contractors to see everything in the site ...
4
votes
2answers
2k views

Best authentication method for accessing sharepoint web from the Internet

We're planning a sharepoint intranet which will be acceded directly from our LAN, however it should be accesible from the Internet, too. What would be the best authentication method available for this ...
2
votes
2answers
2k views

How effective is locking down _vti_bin

I've come across a roadblock where the maintainer of the Sharepoint installation has restricted access to the _vti_bin folder (i.e. denied for all users). I am using SPservices to access the ...
3
votes
1answer
2k views

Anonymous access = huge web services security hole?

My company uses SharePoint for their public website by allowing anonymous access. Some of our lists and document libraries have permissions to only allow certain users to be able to access them. I'm ...
2
votes
1answer
3k views

How do I export site security groups and memberships with PowerShell?

I'm looking for a PowerShell script (or tool) to export a site's groups and group memberships to a text file. These files would be used as backup for the current security configuration in case the ...
1
vote
1answer
179 views

Read configuration section in WebApplication scoped code with CAS

I'm testing some code here, trying to get it to work with CAS. I have a configuration file at a file location with some WCF definitions. I load this code with: var config = ...
0
votes
2answers
123 views

Different security for foms and lists?

Is it possible to have security so that anyone can fill out a form, but only a small amount of people can see the underlying list? We are implementing an form that can contain sensitive information ...
0
votes
2answers
4k views

target audience not working as expected with site group

In my SP2010 farm, I have : one domain group "AD Group" the group have domain\user2 as a member one site group "SP group" with the following members AD group domain\user1 On the home page, I ...
7
votes
3answers
6k views

Why are user permissions set in AD not updated immediately to SharePoint?

I have a SharePoint 2010 Foundation installation on Windows 2008 R2 and SQL Server 2008 and using Claims and Windows authentication. Subsites are visible only to members of a certain group. However, ...
2
votes
3answers
983 views

How do I find out what a group has permission to?

I'm cleaning up a farm that has loads of junk groups on it. Is there an easy way to tell if any of these groups have been assigned access to anything? The intention is to delete groups that have ...
2
votes
1answer
354 views

User not showing on People page although listed when using Powershell

I'm using SharePoint 2010 (14.0.4763.1000) and have a user that is not showing on the People page (_layouts/people.aspx?MembershipGroupId=3). MembershipGroupId=3 is the Owner's Group. When using ...
4
votes
3answers
5k views

How to get a web.config file in a sharepoint 2010 publishing site?

I am working on a sharepoint 2010 project and I noticed in the soultion their is no web.config. I asked one of my fellow co-workers and he mentioned something about we don't have access to to it as ...
3
votes
3answers
2k views

Unable to modify SPWebApplication properties from feature receiver - Access Denied

The scope of the feature is Web. SPWeb site = (SPWeb)properties.Feature.Parent; site.AllowUnsafeUpdates = true; // Set the Web Application's default error page SPSite siteCollection = new ...
2
votes
1answer
200 views

Which accounts should be managed accounts?

Three questions on a theme... Which accounts should be managed accounts? Or perhaps to put it another way, which services / things are best to have as managed accounts? Or perhaps the opposite ...
1
vote
1answer
338 views

Why does the central admin requires to run in IE with elevated privileges?

As described here : http://blogs.msdn.com/b/jorman/archive/2010/07/10/missing-links-or-access-denied-in-central-admin-sharepoint-2010.aspx, I have to run with an elevated IE to get all actions. What ...
4
votes
3answers
2k views

How do you allow Content Authors to add Javascript to a Publishing Page?

We have an internet-facing, SharePoint 2010, Publishing Site. The content authors that maintain the site are JavaScript savvy web designers. They would like to be able to add JavaScript to publishing ...
4
votes
4answers
3k views

Why is SharePoint_Shell_Access permission required to run SharePoint powershell?

So we're setting up a SharePoint farm and it seems our admin accounts require access SharePoint_Shell_Access role on SQL. http://technet.microsoft.com/en-us/library/ee806878.aspx ...
1
vote
2answers
404 views

How to manage the security on the list?

How do I manage the security on a list so one group of users can modify all the fields of an item and one group users can only modify some of the fields?
5
votes
5answers
2k views

User Accounts Disappearing From SP Groups

We've been running into a bizarre scenario and I'm at a complete loss. I'm a site collection admin for my division's portal. We're on a shared internal company-wide MOSS server, and I have no access ...
1
vote
1answer
687 views

How do you register web.config changes to SharePoint service applications, they way you can for web applications?

The SPWebConfigModification class can be used for updating content web applications and also central administration. This can be applied to the SPWebApplication and also SPWebService classes. ...
0
votes
2answers
206 views

Is it possible to grant security roles through an event receiver?

I have a requirement to grant a department contribute to their department parent & child sites. The catch is, they also want to be able to grant & remove contribute to outside department ...
2
votes
0answers
758 views

Page History/Page Permissions exceptions (BreakInheritance(false, false)) [closed]

I'm experiencing a serious problem (SharePoint 2010) I want to share with you. Steps to reproduce it: Create a Web application. Create a site collection inside the Web application previously ...
2
votes
2answers
2k views

How to create a “datasheet-like” list view to update a checkbox in multiple rows?

I am using draft item security on a forms library to only allow the creator of a form and a user with "edit items" permissions to view a form in the library. I would like to provide the user with ...
2
votes
5answers
3k views

SharePoint 2010: Disable / Hide references to SPSDisco.aspx

I asked this question originally on StackOverflow. I was referred here, so I'll repost: After upgrading some of our external websites running on SharePoint 2007 to 2010, we ran a link checker to ...
3
votes
3answers
753 views

Securing usernames and passwords for external SQL DB

We want to ensure that we are following best practice around connecting to a custom database. I'm not a developer as such so thought I would ask SharePoint Overflow :-). We have several SharePoint ...
0
votes
1answer
71 views

Where to store cryptograhic key for external service

I have a SharePoint 2010 web part that communicates with an external service. The external service provider gave us a secret cryptographic key that we must use to sign our requests. Currently, the key ...
0
votes
1answer
210 views

What are some methods to secure Application pages?

I'm jumping into SharePoint 2010 (first SP version for me) and I'm building some application pages. I'm trying to secure the pages by dropping a web.config in the dir with role authorization. Is ...
1
vote
1answer
805 views

SharePoint 2010: When to provision two Search Service Applications?

I am working in a single farm with two distinct web applications. Each web application's content needs to be isolated from the other. Should I provision two Search Service Applications or use a ...
1
vote
1answer
177 views

Basic authentification only for a specific listening ip address?

One of my customer has a requirement which is to allow basic authentication because a outdated SSO and reverse proxy tool (changing this is not an option today). This is true for external access (both ...
2
votes
2answers
934 views

Access Denied Error while updating the web.config

I am using a third party control for my application in SharePoint 2010 and I need to add entries in the web.config of the web application. Programmatically I have added the entries in the code and ...
1
vote
1answer
266 views

Sharepoint Security Trim control & its permission

We have a Custom List in SharePoint 2007, all authenticated users are allowed to add a new item into it. Now, we have a page on which we are displaying the item details and it will be accessible for ...
0
votes
2answers
211 views

How to prevent users from getting at the source files for Excel Web Services

I have a request to put a large Excel dataset on a MOSS 2007 sharepoint page. The XLSX is about 13 MB in values alone - about 50,000 rows. It's updated weekly, usually in batch form (i.e. some ...
0
votes
1answer
98 views

Permission not recognized by collaboration sub-site

I created a sub-site and disinherited from parent. This sub-site contains two specific permission groups. However, people outside the permission groups can still access the site, albeit with read only ...
0
votes
1answer
155 views

Redirecting between zones in MOSS 2007

I have Two zones(Intranet and Internet) for a MOSS Team site.I want something like this When a Intranet(Local AD User) user try to visit Internet zone, he/she should be redirected to the Intranet ...
1
vote
1answer
2k views

ClientContext security won't work with claims-based SP2010 security enabled

I want to connect to SP2010 server with claims based authorization via client context. But I have security issue. First I didn't managed to connect with default credentials. Then I wrote: ...
1
vote
1answer
3k views

InfoPath forms not working when ViewFormPagesLockDown enabled

We have an internet facing, SharePoint 2010, Publishing Site that is accessible to anonymous users. On this site, we have some InfoPath 2010 List forms, exposed using the InfoPath Form Web Part, that ...
1
vote
1answer
283 views

Sharepoint user security best practices question

I am new to the realm of Sharepoint. I am wondering if there is a best-practice for setting up user accounts for Sharepoint. We will be having employees of our company, as well as clients, ...
1
vote
1answer
5k views

Target audience don't work

i turned on target audience for my list and in "Target Audience" column i have such value: ;;;;Portal Owners, Portal Members, Group1. I thought that this is enouf to prevent user to see list item, but ...
1
vote
1answer
854 views

SharePoint 2010 list view caching to bypass 1000 item security scope limit

my current customer has a setup where he has multiple related lists and libaries. the structure is something like the following: An Audit Item has 0:n Issue items has 0:n Documents An Issue has 0:n ...
1
vote
3answers
381 views

Access Denied on Web Part

I followed this article to display sub-sites on site collection's home page. I works fine when user have contribute access. But user with read or view only gets Access Denied. What are my options so I ...
1
vote
2answers
1k views

Programatically adding SharePoint groups to Group Quicklaunch

I'm programatically creating a new site with associated groups (Owners, Members etc) in MOSS 2007 When the site is created, and groups associated with the site, the groups don't appear in the Groups ...
3
votes
1answer
4k views

How to enable access to subsite only to certain users or groups?

I created an intranet site based on Sharepoint Foundation 2010 which is based on mixed authentication (Windows and Form Based). It has a main site where all logged users have access and there are ...
0
votes
1answer
4k views

Best practice: Task list item security, so only Assignee & Administrator can change tasks

I'm reading up on Sharepoint and it's security limitations in terms of unique permissions on items within lists (max 2000 per level). I will have a list/doclib with about ~800 entries, probably with ...
2
votes
1answer
176 views

How to get (admin) access to a SP2010 Site

Someone managed to delete all the user permissions from a SP2010 (sub)Site, including their own (this person was the only site admin). How do you give (the site owner or an administrator account) ...
1
vote
1answer
195 views

How to set permissions such that users can add, edit, and delete list/library items, but cannot edit web part pages or delete web part pages?

I need the ability for users to add, edit, and delete lists/libraries but not have the ability to edit web part pages or delete web part pages. I am boggled that the Edit Items permission allows for ...
1
vote
2answers
251 views

sharepoint with FBA, prevent site administrator from viewing content

I would like to set up a site using FBA, where one requirement is that no one other than a few select people have access to data in the site. That would mean that once the site is set up with FBA, ...
2
votes
4answers
916 views

What is a SharePoint Server Side File Hander?

The definition of the 'View Only' permissions level is as follows: Members of this group can view pages, list items, and documents. If the document has a server-side file handler available, ...