Security is the protection of information and property from theft.
3
votes
1answer
217 views
users with Contribute getting 403 forbidden error
This is something I haven't seen in 4 years. Users in SP Group "Accounting" with Contribute access getting 403b forbidden error. It was working fine until this morning. However, I log in as sp admin ...
2
votes
1answer
103 views
ValidateFormDigest - when exactly does it need to be called?
Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest?
Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...
2
votes
1answer
332 views
Make all sharepoint specific cookies non-persistent?
Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
2
votes
1answer
182 views
RunWithElevatedPrivileges doesn't work in Webpart Constructor
With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
1
vote
1answer
53 views
NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users
I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model.
When I call a webservice method that operates on a SharePoint Web Application ...
1
vote
1answer
29 views
Default Security Groups on Site Creation from Web Service
I am creating SharePoint Team Sites using SharePoint Web Services as I cannot use the object model for this solution (I do not have SharePoint installed on the server where the sites are created ...
1
vote
1answer
45 views
Sharepoint: Retrieve info on assigned user policy
A question from stackoverflow
Case:
Create a User Policy in SharePoint 2010 Web Application Management: assign 'Full read' to user XXX for site YYY;
Call SiteData.asmx/GetContent for site YYY and ...
1
vote
1answer
264 views
Can't open sharepoint designer 2010 when using Basic authentication over a non-SSL connection
I have a sharepoint site and we have to have basic authentication set for users to have access.
But now when i go to open up a site in SP 2010 to do some work i get the error and get transferred to ...
1
vote
1answer
666 views
Exception occurred while connecting to wcf endpoint
I get very strange exception "exception occured while connecting to wcf endpoint .... access denied". only when I go to any Document Library.
I logged on as Administrator and I have added "Full ...
1
vote
1answer
82 views
Cannot read site collection details with some accounts
In my SharePoint environment, I have a few seperate web applications with some different admin users. Now a new user I created is added as local admin (needed for Powershell remoting) and farm admin. ...
1
vote
1answer
1k views
Sign in as a different user access denied
Clicking the "sign in as a different user" link from the system menu in SP 2010 yields an access denied error.
URL is:
\_layouts\closeConnection.aspx?loginasanotheruser=true
any ideas?
1
vote
1answer
168 views
Authentication - multiple web domains
We use claims based authentication and have one application running, say www.abc.com
This application authenticates against AD via claimns provider.
We would like to deploy another web site: ...
0
votes
1answer
9 views
jQuery SP.JS objects to test if current SharePoint user has full control / owner rigths?
As an example, the below jQuery displays current SharePoint user title. Excellent! :)
Is it possible to use the sp.js objects to test If the current user has Full Control on the current page or ...
0
votes
1answer
17 views
Securing files in a library by a people column?
SharePoint Online 2013.
Library with a people column added.
For the site owner, they can add files at will, but must select a person for that column for every file.
But for library members, we ...
2
votes
0answers
161 views
Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given
Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying:
This action couldn't be performed because Office doesn't recognize the ...
2
votes
0answers
62 views
SP 2010: Detect authentication mode
SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
2
votes
0answers
221 views
Getting item level security on SharePoint online through standard web services
SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services ...
1
vote
0answers
7 views
I can add users to the Active users in the portal, but not to People and Groups - Sharepoint 2013 on Office365
I'm using SharePoint 2013 on Office365.
I've added two users in the Admin Portal, both with identical attributes (except name, email address etc.!)
However, when I go onto my site and try to add ...
1
vote
0answers
51 views
Are SharePoint 2007 or 2010 vulnerable to cross-site request forgery out of the box?
An IBM Rational AppScan against a WSS 3.0 installation indicates that it has detected a cross-site request forgery (CSRF/XSRF) vulnerabilities on many pages, for example ...
1
vote
0answers
69 views
Steps to deny anonymous access to _vti_pvt directory iis7
The service.cnf file found in the _vti_pvt directory has the default permission settings which may lead to an unauthorized access to the file
What are the steps to deny anonymous access to _vti_pvt ...
1
vote
0answers
43 views
Why is AddComment on SocialCommentManager throwing SPException?
When I try to add a comment using SocialCommentManager, the AddComment method throws an SPException saying
"The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
0answers
30 views
Is use of PageView web part poses a security risk?
I have two internal web applications in same domain, I want to integrate them within sharepoint using a PageView webpart. Some how the security community of the organization believes it would ...
1
vote
0answers
278 views
Get Permissions with client object model
i want to add a permission on a folder who's inside a document library with javascript/jquery/client object model.
The problem i have is, its a custom permission level created when some feature is ...
1
vote
0answers
38 views
Secure Data from Farm Admins and Database Admins
I am working with a client whose farm admins and database admins may not be approved to view information in one of the site collections due to governmental regulations. Therefore, he would like to ...
1
vote
0answers
431 views
Importing site gives “Security check failed in OnFolderImport” error
I'm using the SharePoint Content Deployment Wizard (2.8 beta) and have successfully exported a site. Now I'm trying to import the site and it gives me the following messages in the log and isn't ...
1
vote
0answers
215 views
Editing navigation from site Actions results in error in MOSS 2007
When I or any other user on any machine tries to change the navigation through Site Actions - Modify Navigation, an error occurs stating
"The security validation for this page is invalid. Click ...
0
votes
0answers
41 views
IE warning - Microsoft Office Contact Retriever
When I open a SP 2010 page with IE 10 on Windows 8, I get this warning:
Internet Explorer Security
A website wants to open web content using this program on your
computer:
Name: ...
0
votes
0answers
25 views
Run Sharepoint Query web service with just the username and/or user role known
On my current project we are implementing a WCF layer wrapping Sharepoint web services. Search is a huge thing in our App. So, we are using a QueryService extensively. It works like a charm in its ...
0
votes
0answers
22 views
Error when sign in as different user: The resource cannot be found. /SitePages/Home.aspx
Create a site collection selecting a site template. Prompted asking whether to use existing groups and gave OK. In the newly created site collection, added new user as member and also in a new user ...
0
votes
0answers
40 views
Managing security and privileges for my Wiki library
I am somehow new to SharePoint. I have created a Wiki Library inside my team site, and it seems that it will give me all the features I need Out-Of-Box such as content editing, rich text editing, ...
0
votes
0answers
14 views
Problems with Check Permissions form
I have a SharePoint 2010 production environment and I'm experiencing unusual behaviour with the Check Permissions form.
I know that a user has access, but the Check Permissions form is not reporting ...
0
votes
0answers
10 views
Limiting Report Subscription Options
We are using SharePoint Enterprise 2010 to provide reporting functionality for our sales team, using SSRS RDL files. The report's themselves work just fine, but we are going to train our sales team ...
0
votes
0answers
16 views
Use Managed Account in WebService to provision a SiteCollection
A GPO forces us to change all user passwords every 90 days - thats why we are using Managed Accounts with automatic password change in our environment for all services. Because of this we do not know ...
0
votes
0answers
46 views
Problems installing Forefront Protection 2010 for SharePoint
I can't istall the virusscanner:
I will get this message
No protectable server applications were detected. Client-only installation is not currently supported.
For examples of server applications ...
0
votes
0answers
69 views
Is there a way to restrict or limit the Manage Permissions permission level?
Scenario:
A custom permission level is created that doesn't have as many rights as the Site Owner role (Full Control permission) but, has more rights than a normal Contributor role (Contribute ...
0
votes
0answers
27 views
How can i activate the 'recurrence' section under list information management policy
I can set the policy settings by going to the list settings. But, when i go to 'List Based Retention Schedule' and click 'set a retention stage' the 'recurrence' section is greyed out. Please let me ...
0
votes
0answers
37 views
Sharepoint Search showing result that user doesnt have access
We Have Sharepoing 2010 Farm server, when user do a search they also get the result of documents that they don't have access.
Is this a known problem in sharepoint?
Can somebody help me fix it?
...
0
votes
0answers
56 views
Proper way to get all lists of a certain type from an entire site collection regardless of current location
I'm creating a webpart that gives the user a feed of any annoucement list in the entire site collection, so they can aggregate data to a central portal.
I'm currently using the following, but can't ...
0
votes
0answers
17 views
tool for script for security auditng
Is there a free tool or script that i can use to return security information across a site collection. Ideally i would like something that shows the user / group name and the url of the site / list ...
0
votes
0answers
54 views
SharePoint 2010 Access Service Account not automatically added to content DB
We've configured Access Services for SharePoint 2010. When we go to use it with a contact site template, the site installs and loads, but we get a red X "An Error has occrurred".
When I look on the ...
0
votes
0answers
50 views
Security Updates via Windows Update?
I am setting up a server to which I will be deploying the site collection and WSP files that I've developed locally.
Prior to restoring the site collection, I'd like to ensure that my build versions ...
0
votes
0answers
150 views
Can't edit user personal settings as site collection administrator
enter image description hereHello, I cannot edit personal settings for a user eventhough I'm a site collection admin. We use only FBA authentication and this is on a Sharepoint 2010 Server Standalone ...
0
votes
0answers
23 views
How do you adjust update an obscurity-based solution to SharePoint 2010?
Has anyone played with how to maintain an obscurity-based solution in SharePoint 2010? Or is this simply something that one needs to approach differently?
In SharePoint 2007, you can use a ...
0
votes
0answers
99 views
sharepoint client object model for silverlight security error
I tried to get data from sharepoint site by client object model. Everything worked fine with .NET object model, but as for silverlight with seperate page (not hosted in sharepoint silverlight web ...
0
votes
0answers
34 views
Way to use AJAX for reading/writing to list in context of Site Definition?
I'm deploying a subsite to multiple SharePoint site collections which has a voting aspect based on Lists.
I'm trying to keep vote fraud to a minimum by attaching identity to a vote.
I can use ...
0
votes
0answers
455 views
Programmatically add multiple users to various groups based on information in a list
Due to security restrictions, my organization has a very complex group structure granting fine-grained permissions. We are trying to build a portal that allows for an approval system for group ...
0
votes
0answers
611 views
Why does a workflow cancel with “access denied” for all but users with Full Control accesse?
I am working with an existing SharePoint deployment that has a convoluted security structure. After cleaning up permissions a bit, an approval workflow for absence requests is somehow not working for ...
0
votes
0answers
181 views
Windows Authentication inside custom WebPart
I have created a custom web part that let's the user sign in using their windows accounts. However, the I get Object Not Set to the Reference error when I set the SetPrincipalAndWriteSessionToken. ...
0
votes
0answers
179 views
Authenticating to sharepoint with kerberos from a java HttpClient
I have a linux\java6 client that will authenticate to sharepoint2010 with NTLM and then send HTTP REST web services using Apache Commons HttpClient.
I can do this with NTLM , but I want to use the ...
0
votes
0answers
89 views
Users denied access to certain site collection until an administrator opens it
We are having a problem with users getting "Access denied" errors when trying to access a certain site collection. These users all have the proper permissions to the site and have accessed it in the ...
