Security is the protection of information and property from theft.

learn more… | top users | synonyms

0
votes
1answer
23 views

SharePoint security based on Active Directory security groups not work

Please help me. In the organization , we have deployed SharePoint 2013 , to control access to sites decided through security group Active Directory. Active Directory security groups are added to the ...
0
votes
0answers
28 views

Create users form SharePoint

In SharePoint, can you create users directly from a teamsite? i.e the users are not local computer users or Active directory users, but they are created and managed from SharePoint. This means that ...
5
votes
5answers
3k views

Google Analytics for an Intranet Site

I installed the Google Analytics tracking code in an intranet site, it works properly. But my concern is, are there any security risks of using it for an intranet site? simply, is it ok to use Google ...
0
votes
1answer
10 views

Web part SecurityException — System.Net.WebPermission failed — Farm Solution

I am getting an error with trying to make a HttpWebRequest inside a web part, I'm getting a SecurityException saying that System.Net.WebPermission failed. While searching for an answer, I came across ...
3
votes
2answers
328 views

Sharepont 2013 - NTLM Logout

Our SharePoint 2013 site will not log users out unless the browser is completely closed. We are using NTLM authentication but the site is hosted, so it is external accessible. We are afraid users ...
2
votes
2answers
71 views

How to check username/accountname under which the code runs?

We want piece of code which we can paste in the code behind and get the username under which code runs for:- (usually .NET code runs under account of application pool) Timer job. Event receiver. ...
0
votes
1answer
26 views

Can Active Directory Upgrade lead to problems with SharePoint?

Are there compatibility issues between SharePoint version and Active Directory version? I have a scenario with MOSS 2007 and Active Directory 2000. I will upgrade Active Directory to 2012. I ...
0
votes
1answer
16 views

External Claims-Based SharePoint 2010 asking users for credentials on documents

I am running a SharePoint Foundation 2010 site which uses claims based authentication. (https://subdomain.domain.com). This is done using a Secure Token Provider. The authentication/authorization ...
1
vote
2answers
64 views

How do I fetch the data from list present in root web of the root site collection?

We need to populate some data on an application page. The application page is present in the layouts folder and hence is accessible via the respective site URL. There are multiple site collections. ...
2
votes
2answers
41 views

Under what permissions/priviledge does the runwithelevatedprivileges code run?

SPSecurity.RunWithElevatedPrivileges Method Executes the specified method with Full Control rights even if the user does not otherwise have Full Control. 1) But which under which account does this ...
0
votes
1answer
22 views

SharePoint installation using one-account method

please help me with one hard task. I am not able to convince some admins and neither whole companies that installing & using SharePoint by using one (local) account method is against all best ...
3
votes
3answers
3k views

Get name of Farm account using Powershell

How can I get the name of the Farm account ? I can see it listed in Get-SPManagedAccount, but do not see any properties on the SPManagedAccount objects to be able to dynamically filter by and ...
1
vote
2answers
35 views

Strange permission behaviour

We have a SP 2010 system. We recently discovered that users with no permissions to a library are able to open documents in a library if provided with a direct url link to the document, thereby ...
0
votes
1answer
567 views

In SP 2010 or SP2013 How can I have search results use audience targeting

I have items in my document library that are configuered for audience targeting. What I would like to do is have the items in my search results page "search results" web part filter the items at an ...
0
votes
1answer
28 views

Deny users access to site home, allow access to document library

I am using SharePoint Foundation 2010 and working on managing permissions at the moment. I would like all users to have access to the document library "Shared Documents". I would like only users part ...
1
vote
0answers
11 views

Unique security scope number inside library

I have seen a recommendation, that there should be no more security scopes than 5000: For most farms, we recommend that you consider lowering this limit to 5,000 unique scopes. For large lists, ...
2
votes
1answer
30 views

Limit number of users in a security group

I've a requirement like there should be only one user with some specific permissions on a given site. We should not allow Admin to add more than one user with those permissions, So I created a group ...
6
votes
2answers
1k views

ValidateFormDigest - when exactly does it need to be called?

Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest? Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...
0
votes
1answer
435 views

Security Exception in SharePoint 2010 when executing

My SharePoint 2010 solution which comprises of 2 Features. One feature uses the Flee library to do some mathematical calculations in some code behind. The solution has a number of class libraries ...
0
votes
1answer
96 views

“The XSS Auditor refused to execute a script in…” from Chrome when using <script> tag in content editor webpart

Embedding javascript in a content editor web part triggers XSS Auditor error in Chrome when editing any webpart on the page containing the content editor web part. Steps to reproduce 1 - Use newest ...
1
vote
1answer
25 views

How to enable non-admin users to store custom application data at a farm level?

When a normal (non-admin) users click my custom-made ribbon button in a document library, I would like to write the document library's information to some persistent farm-wide store (or at least a ...
0
votes
1answer
69 views

Can SPPersistedObject settings be updated by normal users if ran with elevated privileges?

I have a custom ribbon icon "Enlist" deployed to each document library. A normal (i.e. non-admin) user can click this icon; when he does, I would like to permanently save the document library ...
0
votes
0answers
25 views

Check user Permission for List Items

I need to set up custom permission cheking for List Item. For example: list have a PeoplePicker with some staffs and I need to set permission for this SPListItem for whole of this person and his ...
0
votes
1answer
642 views

Taxonomy.asmx returns sometimes 'No credentials are available in the security package'

I've created a WCF WebService which connects to the Taxonomy service from SharePoint with a 'Service Reference' in Visual Studio 2010 to the ...
1
vote
2answers
475 views

Can't open sharepoint designer 2010 when using Basic authentication over a non-SSL connection

I have a sharepoint site and we have to have basic authentication set for users to have access. But now when i go to open up a site in SP 2010 to do some work i get the error and get transferred to ...
1
vote
1answer
1k views

Exception occurred while connecting to wcf endpoint

I get very strange exception "exception occured while connecting to wcf endpoint .... access denied". only when I go to any Document Library. I logged on as Administrator and I have added "Full ...
0
votes
0answers
10 views

Should four different companies (with overlapping associates and security permissions) have diff. web applications

We have four companies that have similar ownership (and some overlapping associates) yet are separately formed corporations. In trying to setup an intranet site, I was wondering if we should have ...
0
votes
2answers
59 views

How do you stop the windows security window always appearing for your SharePoint lists when you connect to outlook

I have added a few SharePoint lists to my outlook (document sets and calendars) and every time I go into outlook it asks for windows credentials for every list/calendar, plus within SharePoint it asks ...
0
votes
0answers
42 views

Using search with elevated permissions in a SharePoint Auto/Provider hosted App

I'm wondering if it's possible to search with "App Only" policy rights. The app scope 'Search' (available in Visual Studio) only allows me to select the "QueryAsUserIgnoreApp" permission. I already ...
3
votes
1answer
28 views

How to make DIV tags accessible based on SharePoint role?

We have 3 DIV tags in master page (so, available to all pages on site). DIV 1: Employee DIV 2: Manager DIV 3: HR There are 3 groups in SharePoint:- Employee, Manager and HR. We want to make the ...
1
vote
0answers
12 views

Control all user traffic to Sharepoint Online

We are working on a gateway solution aimed for Sharepoint Online to control all user traffic and possibly, do changes on requests and responses. Is there any way to enforce/limit connections to ...
0
votes
1answer
62 views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
0
votes
3answers
69 views

List users in SharePoint group running as system

This works as local administrator only, but I'm trying to figure out how I can make it work with NT AUTHORITY\SYSTEM. It starts spitting out group members but fails with access denied on a specific ...
1
vote
1answer
21 views

Managing SharePoint groups at site/site collection level

SharePoint groups are created at site collection level and are assigned to a site. By site collection level it refers to root site. So, reframing the above sentence we get:- SharePoint groups are ...
2
votes
0answers
11 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
1
vote
3answers
53 views

SharePoint user access not updating from AD Security Groups

I have a SharePoint site collection that has no direct user permissions set, we have a policy where users are added to a specific AD group to get access to different areas, your classic Role based ...
1
vote
2answers
419 views

authentication between host-named site collection, https and http

Here's my situation and I'm wondering what the best way to solve it is. I have two domains and I'm trying to pass credentials between them. Maybe it's not possible, but here goes...... Domain One ...
0
votes
1answer
34 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
4
votes
1answer
110 views

What has changed that the security scope limit for SharePoint 2010 is no longer 1000?

What appear to be outdated blog posts everywhere tell you to not exceed 1,000 security scopes per list. Some even provide hard evidence as to why this is a bad idea. What they seem to have in common, ...
0
votes
2answers
90 views

Prevent “Access Denied” error for domain users

I would like all members of the DOMAIN\Domain Users' or 'DOMAIN\Users' AD groups to have read-only access to a site collection and its subsites. I have added these groups to Site Permissions at the ...
3
votes
2answers
58 views

Access Denied from Migrated SP2010 -> 2013 Web App

I've migrated a web application's content database from SP2010 to SP2013. After the migration was complete, I am completely locked out of the web application. Navigating to the root site collection ...
0
votes
1answer
28 views

Login page insted of login prompt in Sharepoint 2013

I have been create a Team Suite site in Sharepoint 2013.When any body try to start seeing site pages a logon window like below image display : How I can show custom login page instead of this ...
0
votes
0answers
9 views

Get request information in IMSO_VirusScanner interface's scan and clean method

I am trying to get current sharepoint's request information in scan/clean method of SharePoint's IMSO_VirusScanner interface. We are getting SPContext in initialize method but not in scan/clean ...
0
votes
3answers
92 views

What is best way manage SharePoint webpart access to database?

I have my custom webpart, which have access to database. I need to configure data source, catalog, username and password, which allows webpart a access database. I don't want that users can see, what ...
1
vote
1answer
95 views

Take ownership over My Sites

Cannot find a way to add an Administrator account (or, for example, Company Administrator group) into Site Collection Administrators list for each of Personal (i.e. My) Sites at SharePoint Online ...
0
votes
1answer
71 views

CSOM Form based authentication Security issue

I'm new in sharepoint development, I was looking for authenticating users via CSOM by using forms based authentication and I found below code. ClientContext ctx = new ...
1
vote
1answer
598 views

SharePoint 2007: Farm administrator process

I have run into an interesting issue. We added a new user as a Farm Admin on the SharePoint 2007 env. The next day the user's account was disabled by IT as it was flagged by monitoring as the SPS ...
1
vote
1answer
273 views

The remote server returned an error: (401) Unauthorized. on new App

I created a new app by following this tutorial http://blogs.msdn.com/b/bspann/archive/2013/01/19/asp-net-mvc-based-apps-for-sharepoint-2013-on-premises.aspx I was able to press F5 and it showed me ...
1
vote
1answer
2k views

ClientContext security won't work with claims-based SP2010 security enabled

I want to connect to SP2010 server with claims based authorization via client context. But I have security issue. First I didn't managed to connect with default credentials. Then I wrote: ...
2
votes
4answers
3k views

Field-Level Security

Is it possible to set up field-level security on list columns for both visibility and modification out of the box, or leveraging out-of-the-box methods without customized InfoPath forms or ...