Security is the protection of information and property from theft.

learn more… | top users | synonyms

3
votes
0answers
432 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
2
votes
0answers
209 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article. This method gets the ...
2
votes
0answers
31 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
2
votes
0answers
73 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
2
votes
0answers
2k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
2
votes
0answers
114 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
1
vote
0answers
25 views

How to redirect a user to a sharepoint online site when using custom login

I would like to have a custom login to my SharePoint Online. I can authenticate successfully by doing the below : var targetSite = new Uri("https://<site_url>"); var login = ...
1
vote
0answers
16 views

Item permissions changed

I have a question because i cant explain why something happend. Suddenly the item permissions on several items are changed. An AD group is gone as a permissions group and instead i see the ...
1
vote
0answers
33 views

Allow access to enter data , but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
1
vote
0answers
36 views

SharePoint setup where admin has no access to data

We have a customer who want's to store sensitive data on SharePoint which should only be accessed from a few members of the company. This would be no problem with SharePoint group policies, but we ...
1
vote
0answers
53 views

Web API / SharePoint

In an attempt to abstract the process of accessing SharePoint data, I would like to create a Web API application that can run server-side code (think, SP objects). What are some best practices for ...
1
vote
0answers
146 views

Data Refresh Account - Login Failure: the user has not been granted the requested logon type at this computer

I am trying to configure my Unattended Data Refresh Account and continue to get the following error with the account I am using: The data refresh for 'sqltestrefresh.xlsx' on Report Center - QA ...
1
vote
0answers
17 views

Control all user traffic to Sharepoint Online

We are working on a gateway solution aimed for Sharepoint Online to control all user traffic and possibly, do changes on requests and responses. Is there any way to enforce/limit connections to ...
1
vote
0answers
32 views

Fine-tuning SP2013 Document Library permissions

I have the need to give access to a role for creating documents and folders in a document library and giving access to another role to create documents (but not folders) How would I go about doing ...
1
vote
0answers
121 views

FBA Custom login page to use 2 factor authentication - simplified

User provides an username/password. Should validate those and only then proceed to step 2. User provides an additional authentication token. If succeeds user is authenticated against SharePoint and ...
1
vote
0answers
30 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
1
vote
0answers
37 views

In SharePoint 2013 is there a security group that allows full access to all content in a farm by default?

I'm setting up a SharePoint 2013 development server and I've added my account to the Farm Admin group. In prior versions this meant that I had access to all content in the farm by default. It looks ...
1
vote
0answers
225 views

How to restrict access to edit attachments in lists?

We have Windows SharePoint Services 3.0 SP 3 (12.0.0.6608 from CA) on Windows 2003 Server R2 EE. In the main we use our WSS as sort of book of problems. And by book of problems, i mean that there is ...
1
vote
0answers
31 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...
1
vote
0answers
418 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
1
vote
0answers
128 views

Why is AddComment on SocialCommentManager throwing SPException?

When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying "The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
0answers
67 views

Is use of PageView web part poses a security risk?

I have two internal web applications in same domain, I want to integrate them within sharepoint using a PageView webpart. Some how the security community of the organization believes it would ...
1
vote
0answers
398 views

SPUtility.GetPrincipalsInGroup not working when claims authentication is enabled

Method SPUtility.GetPrincipalsInGroup can be used to resolve users that belongs to a AD Group. However, when claims authentication is enabled, this method doesn't work as expected. Is there another ...
1
vote
0answers
554 views

Get Permissions with client object model

i want to add a permission on a folder who's inside a document library with javascript/jquery/client object model. The problem i have is, its a custom permission level created when some feature is ...
1
vote
0answers
39 views

Secure Data from Farm Admins and Database Admins

I am working with a client whose farm admins and database admins may not be approved to view information in one of the site collections due to governmental regulations. Therefore, he would like to ...
1
vote
0answers
936 views

Importing site gives “Security check failed in OnFolderImport” error

I'm using the SharePoint Content Deployment Wizard (2.8 beta) and have successfully exported a site. Now I'm trying to import the site and it gives me the following messages in the log and isn't ...
1
vote
0answers
297 views

Editing navigation from site Actions results in error in MOSS 2007

When I or any other user on any machine tries to change the navigation through Site Actions - Modify Navigation, an error occurs stating "The security validation for this page is invalid. Click ...
0
votes
0answers
10 views

How to add security to sharepoint custom WCF service

I've made a custom wcf service under sharepoint 2013, but if i call the service directly (no auth no security=, it work... any suggestions to make the service secured? Thank you very much for any ...
0
votes
0answers
45 views

The context has expired and can no longer be used. (Exception from HRESULT: 0x80090317)

I am facing this error all day long and I have not figured it out yet. I have tried: setting the date time zone in the web application to match that of the server set "security validation expires" ...
0
votes
0answers
8 views

Project task and my task in SharePoint 2010

I have created a project Task and My tasks in sharepoint 2010. I have noticed that this is not getting linked. eg: When I create a project task and assign it to me, it does not display on my tasks ...
0
votes
0answers
31 views

SharePoint Provider Hosted App SharePointContextFilter on Web API

I am writing a SharePoint provider hosted app that also contains a web api (ApiController). When I apply the [SharePointContextFilter] on top of the action nothing happens, it does redirect the ...
0
votes
0answers
15 views

Ways to fix Session fixation in SharePoint 2010

A penetration test was done on our SharePoint instance at the report shows a high risk of Session Fixation More about it here I know this is a built in ASP.NET way when doing Forms Auth. But we dont ...
0
votes
0answers
23 views

Check if the user is in a specific SP security group in the XSL for a DVWP?

I know it is possible to see if the user has access to the list with ddwrt:IfHasRights but I'm wondering if there is a way to check if a user is part of a specific security group? I'd like to be able ...
0
votes
0answers
24 views

change http to https and deploy share point internet portal in share point 2013

currently we deployed our internet portal as http://www.xxxx.com for security reasons our security department said to convert portal to run on https protocal this portal running on sharepoint 2010 ...
0
votes
0answers
15 views

Blocking the standard SQL Server ports and installing share point 2013 for Internet sites is good idea?

We have plan to deploy our organization internet portal , -our all sharepoint 2013 and SQL SERVER s are in DMZ zone for sql server security i am following Configure SQL Server security for ...
0
votes
0answers
130 views

Encrypting files and documents in Sharepoint 2013

I want to host confidential data on Sharepoint 2013 and would like to encrypt these data on a file level. There is already a Transparent Data Encryption (TDE) feature available for Sharepoint but it ...
0
votes
0answers
40 views

Filter on Views don't work after update 2956175 is applied on SP2013 env

We have applied Filter on a task list view on the Assigned To column. This was working fine. Last friday we installed the Security patches available from Microsoft published on 3/10/15. Immediately ...
0
votes
0answers
22 views

Assign Permissions to Document on Upload Workflow

I am using SPD 2010 and I am wondering if the following workflow is possible: I would like to have a workflow that when a document is uploaded by a user, the workflow assigns read permissions to that ...
0
votes
0answers
46 views

Connecting using SSRS Report SharePoint list datasource - Windows Integrated Security doesn't work

I have a report I'm building using SSRS and a SharePoint List as datasource. The report works ok only if I login with my credentials before viewing the report. My credentials do not pass automatically ...
0
votes
0answers
72 views

SharePoint “FormDigest”/“RequestDigest” and Cross site scripting attack

So "formdigest"/"requestdigest" in SharePoint is basically a security token used to tell SharePoint that the POST request that has come to the server is from a authenticated,legitimate user. ...
0
votes
0answers
228 views

Refresh Trusted Security Token Services Metadata feed timer job fails on search server

I'm running SP 2013 with 7 servers in my farm. One of my search servers (I have two) fails this job daily at 12AM? Any ideas? I get the following three errors in the ULS log when this job fails. ...
0
votes
0answers
248 views

How to display custom ContentBySearchWebPart results without security trimming?

I have a custom web part extending the ContentBySearchWebPart class to list all communities that the user isn't member of. I need the results not to be security trimmed, meaning all authenticated ...
0
votes
0answers
19 views

add a statement reminding users the information inside the folder is for internal use only

I have file which needs to add a statement reminding users the information is for internal use only. Is adding this statement possible to read each time the file is opened? The file has a 100 ...
0
votes
0answers
12 views

Grant third party access to sharepoint ribbon without disclosing users

Dear smart people out there, I would like to grant a third party access to the SharePoint ribbon without disclosing the identity of our users. Is this possible? How?
0
votes
0answers
39 views

get error when adding a user to a group site permissions - SharePoint 2010 on premises

I need some help here . Not sure if anyone as gone through this before. But when i try to add user to a group or to anything in sharepoint via site permissions i get an error and a coreelation id. I ...
0
votes
0answers
75 views

Restricting List View Based on Document Library Permissions

I'm looking to restrict a user from accessing certain list data if they do not have access to a related document library and was hoping to get a couple opinions on the best way of doing such. Here's a ...
0
votes
0answers
653 views

Share a folder (break inheritance), access denied

I have a problem in Sharepoint 2013 which is reproducible. Create a document library on any site. Create a folder in this library. Break inheritance on this folder and add a user that doesn't have ...
0
votes
0answers
43 views

SharePoint data / document encryption options: experiences and recommendations

I'm evaluating the options to implement an encryption of the data / documents that are saved in SharePoint (2013). The important requirement is that SharePoint administrators (farm admins) are not ...
0
votes
0answers
186 views

IE default security settings block any App scripts from running

I wrote a Sharepoint-hosted app for use by a single company. But in order for my javascript to execute on their local intranet, which uses Microsoft Windows Server 2008, I have to instruct them to ...
0
votes
0answers
168 views

FBA Active Directory Security Groups Not Working SP 2013

So I have in active directory one security group, lets call it "Shrpt_Users". Within SharePoint I have granted this Active directory group read rights to my sub site: "Advertising". My user ...