Security is the protection of information and property from theft.

learn more… | top users | synonyms

3
votes
0answers
27 views

Connecting CRM Online to an external SharePoint Online

My customer wants to connect a Dynamics CRM Online account to an external Office 365 SharePoint account. Is this possible to do?
3
votes
0answers
471 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
2
votes
0answers
241 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article. This method gets the ...
2
votes
0answers
34 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
2
votes
0answers
82 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
2
votes
0answers
2k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
2
votes
0answers
118 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
1
vote
0answers
24 views

WCF Authorization via SharePoint Security Model

Would like to implement authentication and authorization operations on non-SharePoint hosted cross-domain WCF service via SharePoint 2010 Security Model, which is Windows Authentication. So, a member ...
1
vote
0answers
48 views

SharePoint 2010 - disable SSLv3 and TLS 1.0

I'm tasked to figure out how to disable SSLv3 and TLS 1.0 on SharePoint 2010 farm. After some reading, I came to the following conclusions: It is safe to disable SSLv3 on SharePoint servers, It is ...
1
vote
0answers
31 views

How to list up sites you have permission to

We have a SharePoint 2013 on-prem environment. We are using both sites and site collections as project rooms. On the front page of our intranet I need to list up all sites and site collections which a ...
1
vote
0answers
13 views

SQL usermapping for Farm-account: dbo vs itself

On my SharePoint farm (in SQL) the farm-account is sometimes mapped as user (itself) to a SharePoint database and sometimes the farm-account is mapped as dbo to a database. On all databases the ...
1
vote
0answers
21 views

How can I have end-users visualizing different dimensions from the same Powerpivot on same excel file?

I need help to understand if it is possible to have end-users visualizing different dimensions from the same excel file published in Sharepoint 2013. I have a data warehouse in SQL Server 2012 and ...
1
vote
0answers
20 views

Sharepoint Active Directory Users/Groups

I'm currently testing some things in SharePoint (Trial/Developer mode). Current setup: SharePoint 2013 Server Domain Controller with 2008 R2 (Active Directory). I've configured the SharePoint option ...
1
vote
0answers
47 views

How to redirect a user to a sharepoint online site when using custom login

I would like to have a custom login to my SharePoint Online. I can authenticate successfully by doing the below : var targetSite = new Uri("https://<site_url>"); var login = ...
1
vote
0answers
18 views

Item permissions changed

I have a question because i cant explain why something happend. Suddenly the item permissions on several items are changed. An AD group is gone as a permissions group and instead i see the ...
1
vote
0answers
39 views

Allow access to enter data , but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
1
vote
0answers
39 views

SharePoint setup where admin has no access to data

We have a customer who want's to store sensitive data on SharePoint which should only be accessed from a few members of the company. This would be no problem with SharePoint group policies, but we ...
1
vote
0answers
64 views

Web API / SharePoint

In an attempt to abstract the process of accessing SharePoint data, I would like to create a Web API application that can run server-side code (think, SP objects). What are some best practices for ...
1
vote
0answers
246 views

Data Refresh Account - Login Failure: the user has not been granted the requested logon type at this computer

I am trying to configure my Unattended Data Refresh Account and continue to get the following error with the account I am using: The data refresh for 'sqltestrefresh.xlsx' on Report Center - QA ...
1
vote
0answers
19 views

Control all user traffic to Sharepoint Online

We are working on a gateway solution aimed for Sharepoint Online to control all user traffic and possibly, do changes on requests and responses. Is there any way to enforce/limit connections to ...
1
vote
0answers
32 views

Fine-tuning SP2013 Document Library permissions

I have the need to give access to a role for creating documents and folders in a document library and giving access to another role to create documents (but not folders) How would I go about doing ...
1
vote
0answers
134 views

FBA Custom login page to use 2 factor authentication - simplified

User provides an username/password. Should validate those and only then proceed to step 2. User provides an additional authentication token. If succeeds user is authenticated against SharePoint and ...
1
vote
0answers
32 views

Log sharepoint security events to the windows event log

Is it possible, through either a configuration setting or some minor conding, to make SharePoint log all security events to the Windows Event Log? I'm primarily interested in events that deal with ...
1
vote
0answers
38 views

In SharePoint 2013 is there a security group that allows full access to all content in a farm by default?

I'm setting up a SharePoint 2013 development server and I've added my account to the Farm Admin group. In prior versions this meant that I had access to all content in the farm by default. It looks ...
1
vote
0answers
244 views

How to restrict access to edit attachments in lists?

We have Windows SharePoint Services 3.0 SP 3 (12.0.0.6608 from CA) on Windows 2003 Server R2 EE. In the main we use our WSS as sort of book of problems. And by book of problems, i mean that there is ...
1
vote
0answers
35 views

I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365

I'm using SharePoint 2013 on Office365. I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!) However, when I go onto my site and try to add ...
1
vote
0answers
492 views

Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?

An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
1
vote
0answers
134 views

Why is AddComment on SocialCommentManager throwing SPException?

When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying "The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
0answers
67 views

Is use of PageView web part poses a security risk?

I have two internal web applications in same domain, I want to integrate them within sharepoint using a PageView webpart. Some how the security community of the organization believes it would ...
1
vote
0answers
437 views

SPUtility.GetPrincipalsInGroup not working when claims authentication is enabled

Method SPUtility.GetPrincipalsInGroup can be used to resolve users that belongs to a AD Group. However, when claims authentication is enabled, this method doesn't work as expected. Is there another ...
1
vote
0answers
589 views

Get Permissions with client object model

i want to add a permission on a folder who's inside a document library with javascript/jquery/client object model. The problem i have is, its a custom permission level created when some feature is ...
1
vote
0answers
39 views

Secure Data from Farm Admins and Database Admins

I am working with a client whose farm admins and database admins may not be approved to view information in one of the site collections due to governmental regulations. Therefore, he would like to ...
1
vote
0answers
123 views

Users denied access to certain site collection until an administrator opens it

We are having a problem with users getting "Access denied" errors when trying to access a certain site collection. These users all have the proper permissions to the site and have accessed it in the ...
1
vote
0answers
1k views

Importing site gives “Security check failed in OnFolderImport” error

I'm using the SharePoint Content Deployment Wizard (2.8 beta) and have successfully exported a site. Now I'm trying to import the site and it gives me the following messages in the log and isn't ...
1
vote
0answers
301 views

Editing navigation from site Actions results in error in MOSS 2007

When I or any other user on any machine tries to change the navigation through Site Actions - Modify Navigation, an error occurs stating "The security validation for this page is invalid. Click ...
0
votes
0answers
11 views

Access denied to subsite user group - Sharepoint 2010

I have a sandbox site that currently contains the parent and two sub-sites (Subsite1, Subsite2). The sandbox site has the three standard sandbox groups (Owners, Members, Visitors) then one unique ...
0
votes
0answers
11 views

List Sharepoint groups powershell - missing groups

I am using this code to list all groups within a web app. When I look at results not all the groups are there. When I go to the root of the site - people and groups, the groups are there. Why are ...
0
votes
0answers
18 views

Access Issue for “Robots.txt” in SharePoint WCM site

I have enabled robots.txt on my SharePoint site by activating the Search Engine Sitemap Site Collection Feature as mentioned in this post. I also edited the robots.txt through "Search Engine Sitemap ...
0
votes
0answers
7 views

Validate context from SharePoint site to hosted provider

I'm developing a Provider-Hosted SharePoint App that provides sensitive data. Is there any best way to validate that the access from SharePoint comes from corrent SharePoint? The validation method ...
0
votes
0answers
6 views

2013: security logs do not show data after site creation

The reporting is activated and some reports do work. For the security one it only shows some automated actions at the site creations but no logging of people being added or people being deleted. What ...
0
votes
0answers
27 views

Office 365 SharePoint - Individual File Sharing

I have been debating with my internal team whether to allow the end user to share individual files or not and have also been talking about the potential problem which may arise due to giving each file ...
0
votes
0answers
30 views

Security Exception while trying to start User Profile Synchronization through Web Part

I am new to SharePoint. I have setup SharePoint using least privilege principle and I am trying to start incremental user profile synchronisation through a web part(it works fine when manually doing ...
0
votes
0answers
20 views

Security Trimming, Shared Folders, Limited Access and Possible Workarounds

I'd like to have both security trimming and shared folders within my site collection. This is seemingly impossible, as to allow shared folders you need to turn off Limited Access Lock Down. I was ...
0
votes
0answers
18 views

User account limited access to site settings and unable to access some subsites

The account in question is supposed to be an administrative type account, having access to all things. The account has been configured in the User Policy for the Web Application for Full Control ...
0
votes
0answers
103 views

Getting an Access Denied when clicking on the Documents link in MySite

When I click on the Documents, Tasks, or Documents link in the left nav in MySite I get an access denied error (go to ...
0
votes
0answers
14 views

How to add security to sharepoint custom WCF service

I've made a custom wcf service under sharepoint 2013, but if i call the service directly (no auth no security=, it work... any suggestions to make the service secured? Thank you very much for any ...
0
votes
0answers
61 views

SharePoint 2013 - Verify Active Directory security group membership in Master Page javascript

I desire to add some JavaScript that will verify the current users AD security group membership. If a member of group 'A' the logic will redirect one way. If not in group 'A', but in group 'B' the ...
0
votes
0answers
10 views

Project task and my task in SharePoint 2010

I have created a project Task and My tasks in sharepoint 2010. I have noticed that this is not getting linked. eg: When I create a project task and assign it to me, it does not display on my tasks ...
0
votes
0answers
86 views

SharePoint Provider Hosted App SharePointContextFilter on Web API

I am writing a SharePoint provider hosted app that also contains a web api (ApiController). When I apply the [SharePointContextFilter] on top of the action nothing happens, it does redirect the ...
0
votes
0answers
28 views

Ways to fix Session fixation in SharePoint 2010

A penetration test was done on our SharePoint instance at the report shows a high risk of Session Fixation More about it here I know this is a built in ASP.NET way when doing Forms Auth. But we dont ...