Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
1answer
4k views

add users to central admin but don't allow them acces to change security or permissions?

Is it possible to give users access to Central Admin but deny them access to change security or permissions. For example, they can do everything from creating a web application, service application, ...
1
vote
1answer
181 views

Authentication - multiple web domains

We use claims based authentication and have one application running, say www.abc.com This application authenticates against AD via claimns provider. We would like to deploy another web site: ...
1
vote
1answer
130 views

Cannot create site in different web application - Silverlight Client Object Model

I am developing a Silverlight application. It interacts with SharePoint 2010 using SharePoint Silverlight Managed Client Object Model. One of the application functionalities is to create a ...
1
vote
1answer
49 views

Security Issue for a user group in SharePoint 2010

For a SharePoint group 'A', I made the security to Read only. Now my requirement is that, I have created a custom webpart, with one text box and a button, Where the users from 'A' group was supposed ...
1
vote
3answers
2k views

How to troubleshoot Access Denied without guessing?

I had an issue where users are getting "Access Denied" even though they shouldn't. It turned out to be related to custom code and fixed in the end, but there was a lot of guesswork involved. Is there ...
1
vote
2answers
2k views

SharePoint 2010 Insights (PerformancePoint): '401 Unauthorized' error on invoking 'Run Dashboard designer'

Environment: SharePoint 2010 on Windows 2008 R2 Standard + SQL Server 2008 R2 I am trying to setup the BI infrastructure Lab as outlined in this article: ...
1
vote
3answers
1k views

How to force the Word Automation Services Timer to run?

I need to run the Word Automation Services immediately after adding a job. My code is running in a workflow. Here is what I got so far : SPSecurity.RunWithElevatedPrivileges(delegate() { using ...
1
vote
2answers
839 views

Does breaking library/list security inheritance also break it's items inheritance?

We need to break inheritance on a document library. Some users of a site should have read only to document library 1 while some users should have contributor rights to document library 2 (both within ...
4
votes
1answer
260 views

users with Contribute getting 403 forbidden error

This is something I haven't seen in 4 years. Users in SP Group "Accounting" with Contribute access getting 403b forbidden error. It was working fine until this morning. However, I log in as sp admin ...
2
votes
1answer
52 views

Blocking Access to Specific Sites For Certain Alternate Access Mappings

Ok, so I'm not sure that this is entirely possible, but wanted to pose the question: would it be possible to block access to certain content when the site is accessed from a certain alternate access ...
2
votes
4answers
4k views

Are there any free security audit tool for SharePoint?

Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
2
votes
1answer
672 views

Change List Item Permission via Web Services?

Using web services, is there a way to assign a list item different security than the rest of the list? Lets say I have 3 rows in the list and 2 different groups. 1. A ; Group A & B can see ...
1
vote
4answers
8k views

Viewing all permissions for a user or AD Group in SharePoint 2007?

Similar to this question is there a similar way to look up permissions for a given user or AD Group? SharePoint 2007 really doesn't work in PowerShell and the Internet didn't yield much here.
2
votes
1answer
178 views

Can I use UAG to isolate my customers' portals on our extranet?

It sounds like the best practice for isolating different customers on an extranet is to use separate site collections for each customer (as is recommended in every answer to this question). If I have ...
1
vote
4answers
701 views

Quick Launch View - Problem

I have designed the quick launch for a SharePoint 2010 site in master page, Now for some pages I do not want the quick launch to show up, (Or better say some SharePoint groups). So I added a web ...
0
votes
3answers
1k views

Force a Sharepoint Group's landing page

Lets say I have two groups, Group A and Group B. By default my sites landing page is home .aspx (If I use http://sok1234:456/ It will take me to home.aspx ). Now my requirement is when a user from B ...
0
votes
3answers
1k views

Securing SharePoint for External Access

We are exploring the possibility of making our Intranet available to our employees outside of our network (and not over VPN). Besides firewalls/forward proxies and such (like the Threat Management ...
11
votes
4answers
5k views

Best way to Impersonate in SharePoint

So far, I am aware of below 3 ways of performing impersonation in a SharePoint web part or page : Using Win32 API [DllImport("advapi32.dll", SetLastError=true)] public static extern bool ...
0
votes
1answer
1k views

Unauthorized Access Exception when trying to get site Owner

I get the following exception message: {"Attempted to perform an unauthorized operation."} at Microsoft.SharePoint.SPSite.get_Owner() at MySite.Intranet.QuickLinks.MySiteviewpage.GetSiteOwner() ...
4
votes
1answer
132 views

SharePoint permissions reading from AD

I have a SharePoint sub web with unique permissions, within the site I have 3 SharePoint groups (Owner, Contributor and Viewers), in each of these groups I am including an Active Directory group. ...
1
vote
2answers
222 views

How to remove same session value for different sessions?

I received an error from the Security testing team as follows: It was observed that same session value is used for different sessions. After logout, session value should be cleared and the user ...
0
votes
2answers
548 views

Security for SharePoint 2010 site pages

I have three pages in a SharePoint site. Lets say A.aspx B.aspx C.aspx I also have two groups - say ALLACCESS and LESSACCESS now I want A.aspx page should access only by ALLACCESS, no ...
6
votes
3answers
557 views

Possible to security trim what web parts a user can put on a page?

Basically when you select Insert -> Web Part you get this menu: Is it possible to determine what is available here based on a users role?
0
votes
1answer
406 views

Is it possible to create an external content type from WCF service with message security?

I have an external content type that consumes a WCF service. So far it's something simple, over HTTP, no security, just for tests. Here is a sample to get an idea. Now I'm stepping up a gear and want ...
4
votes
2answers
2k views

Make a folder in a document library read only without using security

I have a document library with about 25,000 folders in it, each folder represents a task in our task system and is used as a document repository for those tasks. Of the 25,000 tasks about 22,000 are ...
1
vote
0answers
39 views

Secure Data from Farm Admins and Database Admins

I am working with a client whose farm admins and database admins may not be approved to view information in one of the site collections due to governmental regulations. Therefore, he would like to ...
0
votes
1answer
227 views

All domain users have full control

On our SharePoint 2010 development server, I noticed that all domain users had full control. On the "Intranet Owners" group, which has Full Control permission level, there are the admin accounts from ...
0
votes
1answer
714 views

Feature Admin tool gives AccessDenied error

I'm using the Feature Admin Tool to discover faulty features on my SharePoint 2010 farm. However, when I click the "Find Faulty Feature in Farm", it throws this error: --------------------------- An ...
2
votes
5answers
4k views

Limit users permission in their own my site

we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
0
votes
0answers
116 views

Users denied access to certain site collection until an administrator opens it

We are having a problem with users getting "Access denied" errors when trying to access a certain site collection. These users all have the proper permissions to the site and have accessed it in the ...
2
votes
1answer
72 views

Silverlight application privileges

I have a silverlight application which uses the client object model to access the sharepoint server. When i run the app "out-of-browser" with elevated trust everything works great, but when i try it ...
1
vote
6answers
3k views

Accounts Needed for Installing SharePoint

I am installing SharePoint on my local machine. What accounts are needed to install SharePoint? It seems ubiquitous that you need the following accounts. SP_Admin (Account you install SP with) ...
1
vote
3answers
2k views

Sharepoint 2010 web application zones and AAM configuration

Is it possible in Sharepoint 2010 to achieve the following goal: On single Web Application add two urls (through AAM), one is usual http://site.com and another is SSL-enabled https://my.site.com and ...
9
votes
3answers
1k views

FAST Search Security Trimming of non Windows External Content Types

We have integrated a back-end web application into SharePoint 2010 using the BCS and the OOTB Web Services connector. The data in the backend system is protected by ACLs and we need these ACLs to be ...
1
vote
2answers
316 views

SharePoint security configuration best practice (different url for accessing site throught SharePoint designer)

I am trying to improve site security and two options were requested: Enable SSL (quite obvious) Set special url in AAM for site administrators (lets say https://admin.spsite.com, usual url looks ...
5
votes
1answer
2k views

How do I remove all users from an SPGroup object?

I have an SPGroup object populated, how can I remove all members from the group, so that essentially I start with a fresh group. I can't delete and recreate it, so I need a way to work with the ...
1
vote
1answer
99 views

Design Advice required on SharePoint 2010

I am new to SharePoint I've a requirement to build Sharepoint 2010 Portal with below specs. There would be 3 user group A. Marketing B. Sales user C. Admin Marketing group will upload docs and ...
0
votes
1answer
162 views

Prevent editors from inserting web parts

Is it possible to restrict editors from inserting web parts anywhere on a SharePoint 2010 publishing page? This article talks about disabling it for certain parts of the page or hiding the Ribbon ...
1
vote
0answers
887 views

Importing site gives “Security check failed in OnFolderImport” error

I'm using the SharePoint Content Deployment Wizard (2.8 beta) and have successfully exported a site. Now I'm trying to import the site and it gives me the following messages in the log and isn't ...
0
votes
1answer
182 views

Creating a web part to manipulate List Data bypassing List and ListItem security

I have a Tasks List and I need to create a Web Part to display one view of that list (with a functionality similar to a List View Web Part: item viewing, editing, sorting, filtering, etc). However, ...
3
votes
6answers
929 views

Security around Web Parts

I have been looking to wrap security around web parts. I already have security wrapped around documents so only the correct people see the allowed documents. The problem lies when a user does not ...
1
vote
1answer
84 views

Check object's permission levels

Are there tools that will display all the permissions to an object in SharePoint 2010 Server? For example, we want to see which AD groups, SharePoint groups, and individuals have any level of access ...
1
vote
2answers
718 views

Best practices on Intranet & Extranet

Should these 2 be on same farm (so that deployment is not a big issue or file share) How is the security managed? Is there any good article that can help me determine best practice?
2
votes
1answer
641 views

What is neccesary to write to filesystem from a Web Part?

How can I allow a web part to create a file on a unc path? I have a location with ntfs permissions set to everyone\full control and am getting 'access denied' messages. The SP2010 app pool is running ...
5
votes
2answers
352 views

Unique Permission Issue

This appears to be by design. I have a user who used unique permissions on a subsite and then used unique permissions on a list in the subsite. They then decided to have the subsite inherit ...
1
vote
1answer
129 views

How to set permissions for SP2010 Server

I'm new to SharePoint 2010 and am creating numerous Publishing sites with workflows, each for a different department. Each department needs to have a few people assigned to be able to create pages, ...
4
votes
1answer
298 views

What is a good strategy for data masking?

Can anyone recommend a good strategy for data masking in SharePoint 2010? How do you replicate live data in development and test environment whilst preserving data security and removing sensitive ...
0
votes
2answers
320 views

LINQ to SharePoint and SPUserToken

When creating a new Linq to SharePoint context, normally we don't pass a site object but we provide a request url. So what should I do if I want to execute Linq queries under a different user ...
1
vote
1answer
148 views

Can I give a Super User the ability to impersonate someone else?

We currently have a situation where we need the ability to fully impersonate a login on a SharePoint Web Application. Effectively any "SuperUser" needs the ability to, without a password, proxy login ...
1
vote
1answer
2k views

Sharepoint 2010 security validation error

When i try to add a link to the top nav bar, I am doing this from the cms so not from code. I get the security validation invalid error. http://img233.imageshack.us/img233/5761/errorcs.png On the ...