Security is the protection of information and property from theft.

learn more… | top users | synonyms

6
votes
5answers
2k views

What is the difference between SPContext.Current.Web and SPContext.Current.Site.OpenWeb()?

My colleague found that some scenarios of working with SPWeb objects depend on how you obtain them. I'm not talking of impersonating with UserTokens - that another story. But at times when you write ...
7
votes
3answers
8k views

Why are user permissions set in AD not updated immediately to SharePoint?

I have a SharePoint 2010 Foundation installation on Windows 2008 R2 and SQL Server 2008 and using Claims and Windows authentication. Subsites are visible only to members of a certain group. However, ...
1
vote
2answers
1k views

View PDFs in web browser

When I go to view a PDF on the web, say a 1040 form at the IRS, when I open it it opens in my browser. When I open a PDF file from my sharepoint 2010 instance, however, it prompts me to download the ...
10
votes
3answers
3k views

Best way to Impersonate in SharePoint

So far, I am aware of below 3 ways of performing impersonation in a SharePoint web part or page : Using Win32 API [DllImport("advapi32.dll", SetLastError=true)] public static extern bool ...
4
votes
2answers
2k views

Best authentication method for accessing sharepoint web from the Internet

We're planning a sharepoint intranet which will be acceded directly from our LAN, however it should be accesible from the Internet, too. What would be the best authentication method available for this ...
1
vote
3answers
717 views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
5
votes
5answers
2k views

User Accounts Disappearing From SP Groups

We've been running into a bizarre scenario and I'm at a complete loss. I'm a site collection admin for my division's portal. We're on a shared internal company-wide MOSS server, and I have no access ...
0
votes
2answers
5k views

Stop inheriting permissions programatically

I want to set read permissions to some sharepoint groups to a list. For existing sites I did it manually, Stop Inherit permissions. Then on groups I chose the groups and edited their permissions, ...
1
vote
1answer
2k views

What are the relationship between administrators groups of domain, dev computer and of Sharepoint services?

I know-know I can search and read but anyway I would need to ask in order to escape possible typos, personal misunderstandings and to better remember. I develop on a machine with installed ...
1
vote
3answers
191 views

List Security in Sharepoint

I need to set permissions for a list that looks like this: I have two different teams, each with a team lead and 3 team members. The team members should not see each others data. Team leaders have ...
4
votes
1answer
1k views

How to Set Forms Authentication Timeout?

I have a public facing SP2010 site that uses forms authentication (default ASP.NET membership provider). I noticed that The user stays logged in even after hours of inactivity. We need the user to be ...
3
votes
2answers
2k views

Sign in as a different user access denied

Clicking the "sign in as a different user" link from the system menu in SP 2010 yields an access denied error. URL is: \_layouts\closeConnection.aspx?loginasanotheruser=true any ideas?
3
votes
3answers
2k views

Unable to modify SPWebApplication properties from feature receiver - Access Denied

The scope of the feature is Web. SPWeb site = (SPWeb)properties.Feature.Parent; site.AllowUnsafeUpdates = true; // Set the Web Application's default error page SPSite siteCollection = new ...
2
votes
4answers
3k views

How to Password Protect a SharePoint Object (Reassuring High Level Users That its secure)

Edit to clarify: The purpose of this isn't to replace SharePoint security or to add some extra super security or about trust in SharePoint, it is instead to consider something that is very much ...
2
votes
4answers
3k views

Limit users permission in their own my site

we want to limit users from changing the settings on a particular library in their my site. Am i right in thinking that to do so we will need to remove them from the site collection administrators ...
1
vote
6answers
2k views

Accounts Needed for Installing SharePoint

I am installing SharePoint on my local machine. What accounts are needed to install SharePoint? It seems ubiquitous that you need the following accounts. SP_Admin (Account you install SP with) ...
3
votes
3answers
796 views

Securing usernames and passwords for external SQL DB

We want to ensure that we are following best practice around connecting to a custom database. I'm not a developer as such so thought I would ask SharePoint Overflow :-). We have several SharePoint ...
3
votes
2answers
2k views

Running declarative workflows under system account

I have an InfoPath form that starts a workflow (on item created). The business requirement is that after submission form must be read-only (no changes to the initial request can be made). However ...
3
votes
2answers
4k views

Session time out for Windows Authentication

I have a requirement where we need to timeout the SharePoint sessions (security validation). Since I am using Windows Authentication I am not able to use session timeouts (as Windows authentication ...
1
vote
2answers
125 views

How do I fetch the data from list present in root web of the root site collection?

We need to populate some data on an application page. The application page is present in the layouts folder and hence is accessible via the respective site URL. There are multiple site collections. ...
1
vote
1answer
2k views

Why does a workflow cancel with “access denied” for all but users with Full Control accesse?

I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
1
vote
3answers
4k views

Sharepoint 2010 Item level Permission to a Document Library is Our approach right?

We are planing to apply Item level Permission on document library and want share point experts advise...are we going right way or we will fall in performance issue or others.. What We Have : 1- We ...
1
vote
2answers
2k views

PowerShell to Remove Site User Permission

I am looking for some help removing a User Permission from a site using PowerShell.
1
vote
1answer
3k views

InfoPath forms not working when ViewFormPagesLockDown enabled

We have an internet facing, SharePoint 2010, Publishing Site that is accessible to anonymous users. On this site, we have some InfoPath 2010 List forms, exposed using the InfoPath Form Web Part, that ...
0
votes
1answer
93 views

Can SPPersistedObject settings be updated by normal users if ran with elevated privileges?

I have a custom ribbon icon "Enlist" deployed to each document library. A normal (i.e. non-admin) user can click this icon; when he does, I would like to permanently save the document library ...
0
votes
1answer
587 views

SharePoint Permissions not working

I am using SharePoint 2010. When I set permissions (I Only grand myself access) on a document library or folder or document EVERYONE can still see it and download the documents. Why is that? What is ...
0
votes
1answer
375 views

“404 FILE NOT FOUND” on my username entries

In Sharepoint 2010 Central Administration --> Security --> Manage the farm admii nistrator group (Central Administration : Site Settings : People and Groups - Farm Administrators), when I click on my ...
0
votes
3answers
1k views

Force a Sharepoint Group's landing page

Lets say I have two groups, Group A and Group B. By default my sites landing page is home .aspx (If I use http://sok1234:456/ It will take me to home.aspx ). Now my requirement is when a user from B ...
0
votes
2answers
5k views

target audience not working as expected with site group

In my SP2010 farm, I have : one domain group "AD Group" the group have domain\user2 as a member one site group "SP group" with the following members AD group domain\user1 On the home page, I ...