0
votes
0answers
11 views

Should four different companies (with overlapping associates and security permissions) have diff. web applications

We have four companies that have similar ownership (and some overlapping associates) yet are separately formed corporations. In trying to setup an intranet site, I was wondering if we should have ...
2
votes
1answer
548 views

Make all sharepoint specific cookies non-persistent?

Our app came out of web vulnerability assessment. The findings suggested that we should take care of persistent cookies; avoid them. Cookies are persisted by setting the Expires property to some ...
4
votes
1answer
2k views

Anonymous access = huge web services security hole?

My company uses SharePoint for their public website by allowing anonymous access. Some of our lists and document libraries have permissions to only allow certain users to be able to access them. I'm ...