Security is the protection of information and property from theft.

learn more… | top users | synonyms

1
vote
1answer
1k views

Exception occurred while connecting to wcf endpoint

I get very strange exception "exception occured while connecting to wcf endpoint .... access denied". only when I go to any Document Library. I logged on as Administrator and I have added "Full ...
2
votes
1answer
282 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
1
vote
1answer
2k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
0
votes
1answer
837 views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
3
votes
1answer
1k views

What permissions do I need for a user to see all entries in a list where typical users can see only their own submissions?

I have a list where users can create and see their own items, but not other users' items. I, being the site owner, can see all items. How can I give specific users within a Sharepoint Group the ...
0
votes
1answer
355 views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
0
votes
1answer
318 views

Event Receivers on Add/Remove Users

I need some design ideas for a requirement to audit when uses are added/removed from an object. I need to collect the user doing the add/remove, date time, and reason for adding. I need to do this to ...
0
votes
0answers
17 views

FBA Active Directory Security Groups Not Working SP 2013

So I have in active directory one security group, lets call it "Shrpt_Users". Within SharePoint I have granted this Active directory group read rights to my sub site: "Advertising". My user ...
0
votes
0answers
18 views

SharePoint Portal

I am completely new to the SharePoint development environment, though I have experience in VBA. I am attempting to create a SharePoint site that will allow several vendors to view an Excel ...
2
votes
4answers
3k views

How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)

Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
0
votes
1answer
628 views

“The XSS Auditor refused to execute a script in…” from Chrome when using <script> tag in content editor webpart

Embedding javascript in a content editor web part triggers XSS Auditor error in Chrome when editing any webpart on the page containing the content editor web part. Steps to reproduce 1 - Use newest ...
0
votes
0answers
12 views

Users with no permissions can still see empty list views

I have a problem regarding security on lists. If I break role inheritance on lists and exclude users from having access to that specific list, the users are still able to navigate to the list and ...
0
votes
0answers
18 views

Folder permissions

I have a problem where I need to allow access to a folder to a select group of people where the folder is buried deep within a series of folders. For example Folder A (top level | ---->Folder ...
0
votes
1answer
737 views

Taxonomy.asmx returns sometimes 'No credentials are available in the security package'

I've created a WCF WebService which connects to the Taxonomy service from SharePoint with a 'Service Reference' in Visual Studio 2010 to the ...
0
votes
1answer
33 views

Check if a user can read a specified File

I'm working with SharePoint Client API 2010 for a .Net application. I want to check if the current user (or a specified user) can read a specified File? This user could also be in a SP Group or in a ...
2
votes
4answers
3k views

Are there any free security audit tool for SharePoint?

Are there any codeplex or 3rd party free tool for security tool? I need to run this on several sites and I dont have ample time to create a powershell script for this. Thanks in advance.
0
votes
1answer
566 views

Security Exception in SharePoint 2010 when executing

My SharePoint 2010 solution which comprises of 2 Features. One feature uses the Flee library to do some mathematical calculations in some code behind. The solution has a number of class libraries ...
6
votes
2answers
2k views

ValidateFormDigest - when exactly does it need to be called?

Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest? Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...
0
votes
1answer
37 views

Is it possible to apply device dependent security trimming?

With SP2013, is it possible to apply additional restrictions to what can be viewed by a user using a mobile device (specifically Windows Phone) as opposed to a desktop or laptop? We can assume that ...
1
vote
2answers
971 views

Use Outlook distribution list as SharePoint security group

I got across this question, is it possible to use an Outlook distribution list as SharePoint security group? Let's say that I have a mail group and I need to use it as the Members group of one of my ...
1
vote
1answer
28 views

How to manage security for on-prem provider hosted apps that are published to SharePoint Online?

I have a provider hosted app where the web site is running locally (not in azure) and the SharePoint app will be published to SharePoint online. (so user connects to SharePoint online site, clicks on ...
1
vote
0answers
47 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article: ...
1
vote
1answer
122 views

Take ownership over My Sites

Cannot find a way to add an Administrator account (or, for example, Company Administrator group) into Site Collection Administrators list for each of Personal (i.e. My) Sites at SharePoint Online ...
0
votes
4answers
4k views

Users get access denied but “check-permissions” claim they should have access

SharePoint 2010 is giving me a major headache. We have a site collection with a number of sites where we are trying to give certain users access to certain areas of the site. The problem is that ...
0
votes
1answer
24 views

What user executes the code when running SPSecurity.RunWithElevatedPriveleges?

I have done research on this and still can't find a strong answer. Some soures say that when using SPSecurity.RunWithElevatedPriveleges that the code is executed as a site collection admin. Some ...
1
vote
1answer
2k views

jQuery SP.JS objects to test if current SharePoint user has full control / owner rigths?

As an example, the below jQuery displays current SharePoint user title. Excellent! :) Is it possible to use the sp.js objects to test If the current user has Full Control on the current page or ...
0
votes
0answers
9 views

Some of ADSecurity groups are not available fro permission

I have two AD Security group, one of the group is available in the Grant Permission page however other security group is not available. Any idea on what makes an ADSecurity group visible to ...
8
votes
3answers
2k views

Java to Sharepoint interface, with claims based authentication

I have a sharepoint server with a claims-based authentication (ADFS server). I have a Java app that needs to push data to a sharepoint list, preferably over the REST API, and with the additional ...
2
votes
1answer
63 views

Question on AD Groups and Sharepoint Groups

I have a security group inside Active Directory called 'Services'. I've added a number of users to the group. I then went into Sharepoint and added that group to the 'Contribute' sharepoint group. ...
1
vote
1answer
68 views

How to configure security (IIS, token, etc.) for a website that uses SharePoint 2013 REST API?

I have a website that uses the SharePoint 2013 REST API to render list data (via JQuery AJAX) on the website. It is pretty straightforward and works fine, but my challenge is figuring out the security ...
0
votes
0answers
103 views

How to read the SharePoint 2010 security log?

{f90exyzy-d84c-4659-abcd-7c1e072a8353} {7cc53188-8ac2-abcd-b251-60768382794a} Site Karthik <test\kart> dem 2014-05-13T15:55:11 Security Role Bind Update SharePoint ...
0
votes
1answer
27 views

Allow users to post comment to a blog in SharePoint 2010 with out seeing the blog

I am currently trying to create a blog on our IT sub site where we discuss various topics. We would like to make it possible that every end user is able to make a post/comment on improvements they ...
0
votes
1answer
63 views

Security Validation Error

I'm trying to create a spweb in page_load via a control on the site. I get the error "The security validation for this page is invalid". I've got a postback (No GET-Request) and also tried ...
1
vote
1answer
75 views

SharePoint JavaScript Object Model Security and Permissions

I am writing an application whose logic executes in the browser using JSOM. The application might have permissions that exceed that of those who access the application. Let's say the application ...
1
vote
3answers
1k views

How to force the Word Automation Services Timer to run?

I need to run the Word Automation Services immediately after adding a job. My code is running in a workflow. Here is what I got so far : SPSecurity.RunWithElevatedPrivileges(delegate() { using ...
0
votes
0answers
28 views

Web Page Security Validation

What's the "best practice" when it comes to the web page security validation expiration? We set ours at 55 minutes per web application. We have SharePoint 2010, Standard Edition.
0
votes
0answers
12 views

Error when creating new site collection by new user (developer)

We have installed SharePoint on a server. A new sharepoint developer has joined the team and the system admins have provided him a login: server\newemployee Now, if he logs into Windows and opens ...
0
votes
0answers
13 views

Avoid giving full control, but still be able to create subsite. Question about groups

So I went ahead and created a new group and Permission Level called "Create Subsites". I added the Create Subsite permission and assigned that Permission level to a new group. The users can create ...
0
votes
1answer
81 views

SharePoint security based on Active Directory security groups not work

Please help me. In the organization , we have deployed SharePoint 2013 , to control access to sites decided through security group Active Directory. Active Directory security groups are added to the ...
0
votes
0answers
30 views

Create users form SharePoint

In SharePoint, can you create users directly from a teamsite? i.e the users are not local computer users or Active directory users, but they are created and managed from SharePoint. This means that ...
5
votes
5answers
3k views

Google Analytics for an Intranet Site

I installed the Google Analytics tracking code in an intranet site, it works properly. But my concern is, are there any security risks of using it for an intranet site? simply, is it ok to use Google ...
0
votes
1answer
23 views

Web part SecurityException — System.Net.WebPermission failed — Farm Solution

I am getting an error with trying to make a HttpWebRequest inside a web part, I'm getting a SecurityException saying that System.Net.WebPermission failed. While searching for an answer, I came across ...
3
votes
2answers
449 views

Sharepont 2013 - NTLM Logout

Our SharePoint 2013 site will not log users out unless the browser is completely closed. We are using NTLM authentication but the site is hosted, so it is external accessible. We are afraid users ...
2
votes
2answers
197 views

How to check username/accountname under which the code runs?

We want piece of code which we can paste in the code behind and get the username under which code runs for:- (usually .NET code runs under account of application pool) Timer job. Event receiver. ...
0
votes
1answer
46 views

Can Active Directory Upgrade lead to problems with SharePoint?

Are there compatibility issues between SharePoint version and Active Directory version? I have a scenario with MOSS 2007 and Active Directory 2000. I will upgrade Active Directory to 2012. I ...
0
votes
1answer
34 views

External Claims-Based SharePoint 2010 asking users for credentials on documents

I am running a SharePoint Foundation 2010 site which uses claims based authentication. (https://subdomain.domain.com). This is done using a Secure Token Provider. The authentication/authorization ...
1
vote
2answers
113 views

How do I fetch the data from list present in root web of the root site collection?

We need to populate some data on an application page. The application page is present in the layouts folder and hence is accessible via the respective site URL. There are multiple site collections. ...
2
votes
2answers
76 views

Under what permissions/priviledge does the runwithelevatedprivileges code run?

SPSecurity.RunWithElevatedPrivileges Method Executes the specified method with Full Control rights even if the user does not otherwise have Full Control. 1) But which under which account does this ...
0
votes
1answer
26 views

SharePoint installation using one-account method

please help me with one hard task. I am not able to convince some admins and neither whole companies that installing & using SharePoint by using one (local) account method is against all best ...
4
votes
3answers
4k views

Get name of Farm account using Powershell

How can I get the name of the Farm account ? I can see it listed in Get-SPManagedAccount, but do not see any properties on the SPManagedAccount objects to be able to dynamically filter by and ...