Security is the protection of information and property from theft.

learn more… | top users | synonyms

2
votes
0answers
157 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article: ...
2
votes
0answers
28 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
2
votes
0answers
57 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
2
votes
0answers
2k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
2
votes
0answers
110 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
2
votes
0answers
387 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
1
vote
0answers
11 views

Can I set alerts for an AD group without having exchange?

We have our security groups coming from AD on the AD import. A user wants to set an alert on a list to notify the group when something changes. The group is a global security group. I can set the ...
1
vote
0answers
20 views

Allow access to enter data , but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
1
vote
0answers
28 views

SharePoint setup where admin has no access to data

We have a customer who want's to store sensitive data on SharePoint which should only be accessed from a few members of the company. This would be no problem with SharePoint group policies, but we ...
1
vote
0answers
95 views

Data Refresh Account - Login Failure: the user has not been granted the requested logon type at this computer

I am trying to configure my Unattended Data Refresh Account and continue to get the following error with the account I am using: The data refresh for 'sqltestrefresh.xlsx' on Report Center - QA ...
1
vote
0answers
16 views

Control all user traffic to Sharepoint Online

We are working on a gateway solution aimed for Sharepoint Online to control all user traffic and possibly, do changes on requests and responses. Is there any way to enforce/limit connections to ...
1
vote
0answers
28 views

Fine-tuning SP2013 Document Library permissions

I have the need to give access to a role for creating documents and folders in a document library and giving access to another role to create documents (but not folders) How would I go about doing ...
1
vote
0answers
112 views

FBA Custom login page to use 2 factor authentication - simplified

User provides an username/password. Should validate those and only then proceed to step 2. User provides an additional authentication token. If succeeds user is authenticated against SharePoint and ...
1
vote
0answers
28 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
1
vote
0answers
35 views

In SharePoint 2013 is there a security group that allows full access to all content in a farm by default?

I'm setting up a SharePoint 2013 development server and I've added my account to the Farm Admin group. In prior versions this meant that I had access to all content in the farm by default. It looks ...
1
vote
0answers
207 views

How to restrict access to edit attachments in lists?

We have Windows SharePoint Services 3.0 SP 3 (12.0.0.6608 from CA) on Windows 2003 Server R2 EE. In the main we use our WSS as sort of book of problems. And by book of problems, i mean that there is ...
1
vote
0answers
28 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...
1
vote
0answers
369 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
1
vote
0answers
121 views

Why is AddComment on SocialCommentManager throwing SPException?

When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying "The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
0answers
66 views

Is use of PageView web part poses a security risk?

I have two internal web applications in same domain, I want to integrate them within sharepoint using a PageView webpart. Some how the security community of the organization believes it would ...
1
vote
0answers
369 views

SPUtility.GetPrincipalsInGroup not working when claims authentication is enabled

Method SPUtility.GetPrincipalsInGroup can be used to resolve users that belongs to a AD Group. However, when claims authentication is enabled, this method doesn't work as expected. Is there another ...
1
vote
0answers
514 views

Get Permissions with client object model

i want to add a permission on a folder who's inside a document library with javascript/jquery/client object model. The problem i have is, its a custom permission level created when some feature is ...
1
vote
0answers
39 views

Secure Data from Farm Admins and Database Admins

I am working with a client whose farm admins and database admins may not be approved to view information in one of the site collections due to governmental regulations. Therefore, he would like to ...
1
vote
0answers
870 views

Importing site gives “Security check failed in OnFolderImport” error

I'm using the SharePoint Content Deployment Wizard (2.8 beta) and have successfully exported a site. Now I'm trying to import the site and it gives me the following messages in the log and isn't ...
1
vote
0answers
289 views

Editing navigation from site Actions results in error in MOSS 2007

When I or any other user on any machine tries to change the navigation through Site Actions - Modify Navigation, an error occurs stating "The security validation for this page is invalid. Click ...
0
votes
0answers
13 views

Remove user/group from everyone group SharePoint online

Is there a way to exclude a user or group from the 'everyone' security group in SP Online? The reason I ask is we have blog site which everyone needs to be able to contribute to, simple - but we ...
0
votes
0answers
10 views

Blocking the standard SQL Server ports and installing share point 2013 for Internet sites is good idea?

We have plan to deploy our organization internet portal , -our all sharepoint 2013 and SQL SERVER s are in DMZ zone for sql server security i am following Configure SQL Server security for ...
0
votes
0answers
12 views

Encrypting files and documents in Sharepoint 2013

I want to host confidential data on Sharepoint 2013 and would like to encrypt these data on a file level. There is already a Transparent Data Encryption (TDE) feature available for Sharepoint but it ...
0
votes
0answers
26 views

Filter on Views don't work after update 2956175 is applied on SP2013 env

We have applied Filter on a task list view on the Assigned To column. This was working fine. Last friday we installed the Security patches available from Microsoft published on 3/10/15. Immediately ...
0
votes
0answers
13 views

Assign Permissions to Document on Upload Workflow

I am using SPD 2010 and I am wondering if the following workflow is possible: I would like to have a workflow that when a document is uploaded by a user, the workflow assigns read permissions to that ...
0
votes
0answers
27 views

Connecting using SSRS Report SharePoint list datasource - Windows Integrated Security doesn't work

I have a report I'm building using SSRS and a SharePoint List as datasource. The report works ok only if I login with my credentials before viewing the report. My credentials do not pass automatically ...
0
votes
0answers
28 views

SharePoint “FormDigest”/“RequestDigest” and Cross site scripting attack

So "formdigest"/"requestdigest" in SharePoint is basically a security token used to tell SharePoint that the POST request that has come to the server is from a authenticated,legitimate user. ...
0
votes
0answers
26 views

Web API / SharePoint

In an attempt to abstract the process of accessing SharePoint data, I would like to create a Web API application that can run server-side code (think, SP objects). What are some best practices for ...
0
votes
0answers
117 views

Refresh Trusted Security Token Services Metadata feed timer job fails on search server

I'm running SP 2013 with 7 servers in my farm. One of my search servers (I have two) fails this job daily at 12AM? Any ideas? I get the following three errors in the ULS log when this job fails. ...
0
votes
0answers
8 views

Account on web application level no access to site

I have added an account (central admin > web application > policy for web application) to the list on all zones, with full control I now try to logon with that account on a site in a site ...
0
votes
0answers
153 views

How to display custom ContentBySearchWebPart results without security trimming?

I have a custom web part extending the ContentBySearchWebPart class to list all communities that the user isn't member of. I need the results not to be security trimmed, meaning all authenticated ...
0
votes
0answers
16 views

add a statement reminding users the information inside the folder is for internal use only

I have file which needs to add a statement reminding users the information is for internal use only. Is adding this statement possible to read each time the file is opened? The file has a 100 ...
0
votes
0answers
9 views

Grant third party access to sharepoint ribbon without disclosing users

Dear smart people out there, I would like to grant a third party access to the SharePoint ribbon without disclosing the identity of our users. Is this possible? How?
0
votes
0answers
34 views

get error when adding a user to a group site permissions - SharePoint 2010 on premises

I need some help here . Not sure if anyone as gone through this before. But when i try to add user to a group or to anything in sharepoint via site permissions i get an error and a coreelation id. I ...
0
votes
0answers
65 views

Restricting List View Based on Document Library Permissions

I'm looking to restrict a user from accessing certain list data if they do not have access to a related document library and was hoping to get a couple opinions on the best way of doing such. Here's a ...
0
votes
0answers
379 views

Share a folder (break inheritance), access denied

I have a problem in Sharepoint 2013 which is reproducible. Create a document library on any site. Create a folder in this library. Break inheritance on this folder and add a user that doesn't have ...
0
votes
0answers
22 views

SharePoint data / document encryption options: experiences and recommendations

I'm evaluating the options to implement an encryption of the data / documents that are saved in SharePoint (2013). The important requirement is that SharePoint administrators (farm admins) are not ...
0
votes
0answers
127 views

IE default security settings block any App scripts from running

I wrote a Sharepoint-hosted app for use by a single company. But in order for my javascript to execute on their local intranet, which uses Microsoft Windows Server 2008, I have to instruct them to ...
0
votes
0answers
156 views

FBA Active Directory Security Groups Not Working SP 2013

So I have in active directory one security group, lets call it "Shrpt_Users". Within SharePoint I have granted this Active directory group read rights to my sub site: "Advertising". My user ...
0
votes
0answers
31 views

Users with no permissions can still see empty list views

I have a problem regarding security on lists. If I break role inheritance on lists and exclude users from having access to that specific list, the users are still able to navigate to the list and ...
0
votes
0answers
31 views

Folder permissions

I have a problem where I need to allow access to a folder to a select group of people where the folder is buried deep within a series of folders. For example Folder A (top level | ---->Folder ...
0
votes
0answers
10 views

Some of ADSecurity groups are not available fro permission

I have two AD Security group, one of the group is available in the Grant Permission page however other security group is not available. Any idea on what makes an ADSecurity group visible to ...
0
votes
0answers
483 views

How to read the SharePoint 2010 security log?

{f90exyzy-d84c-4659-abcd-7c1e072a8353} {7cc53188-8ac2-abcd-b251-60768382794a} Site Karthik <test\kart> dem 2014-05-13T15:55:11 Security Role Bind Update SharePoint ...
0
votes
0answers
34 views

Create users form SharePoint

In SharePoint, can you create users directly from a teamsite? i.e the users are not local computer users or Active directory users, but they are created and managed from SharePoint. This means that ...
0
votes
0answers
68 views

Having trouble setting up a secure architecture using the SharePoint App model and an external REST server

We have a situation that I am having a very hard time finding information on. We need to create an app in SharePoint 2013 that uses an external data source. It's an ODBC source accessing a non-MS ...