Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authorization]

The function of specifying access rights to resources, which is related to information security and computer security in general and to access control in particular.

0
votes
1answer
26 views

Creating a secure .Net WebAPI for Sharepoint

I have created a Custom Web API using .net C# that will be called in my sharepoint online and i was wondering if is there is anything i could use from sharepoint and use it in my WebApi to verify that ...
0
votes
1answer
27 views

How to allow access to list item file attachments that was not created by the user with special constraints

I am struggling for some time with this problem and can't decide how to handle it. We have a sharepoint list with 3 groups of users: SOHO Account Managers SMB Account Managers ENT Account Managers ...
1
vote
1answer
32 views

How to set up user authorization by certificate on SharePoint 2016?

I need to authorize users not only by login/password but also by individual certificates. How can I create such certificates manually and configure SharePoint to prompt certificate for authorization ...
0
votes
1answer
39 views

User+Add-in authorization on SharePoint Online

We'd like to develop an on-provider web app which can import documents from a Sharepoint instance. Right now we are focusing on Sharepoint Online, but later on, we will create on-premise solutions as ...
1
vote
2answers
339 views

WebRequest to Sharepoint site using Access Token returns 403

I need to create web request to specific page in SharePoint Online using Access Token in order to get certain Header information, but I keep getting 403 and I'm not sure why. After toying with access ...
1
vote
0answers
143 views

SharePoint + “/_api/SP.Utilities.Utility.SendEmail” + not working for specific account

Ours is a SharePoint 2016 On Prem env. We have developed a custom component which uses "/_api/SP.Utilities.Utility.SendEmail" to send email. Email is getting sent. Except for a specific account. ...
1
vote
2answers
30 views

prevent deletion permission on file/folder level

I have a question on this site permission/access level thing. This is my requirement. All users of the overall site get permission to view, edit and delete files and folders. Yet there is one folder/...
0
votes
0answers
141 views

AADSTS70007 'query' is not a supported value of 'response_mode' when requesting a token

I'm trying to authorize OAuth application with AppOnly token. Request in browser looks like: https://login.windows.net/common/oauth2/authorize?nonce=628434ff-1d1e-4712-9da3-ccf67ee39434&prompt=...
0
votes
1answer
851 views

How to perform POST operations in SharePoint 2013 using REST API from external Application

I am trying to perform POST operations in SharePoint 2013 environment using REST API from external application running under the same company domain. Till now I am to do the GET operation successfully ...
18
votes
3answers
21k views

SharePoint Online REST API Authentication In POSTMAN

I am trying to authenticate with the REST API for a list in SharePoint Online using POSTMAN. For example, the URL for my site looks something like this: https://mytenantname.sharepoint.com/sites/...
0
votes
2answers
60 views

How to allow only authorised admin to use the “Edit”, “Page” Ribbon in SP2013?

I'm trying to make the Ribbon such that only authorized admin (permissions set in the site permissions feature) can use the Ribbon controls (Browse, Edit, Page). How do I prevent unauthorized users ...
0
votes
1answer
409 views

SharePoint Online returns 401 for any call, right after getting access token

I unable to perform any request to SharePoint Online via REST Api. It was used service high-trust authorization (App Only) to get access token. JSON Web Token, I've got, looks valid, see decoded ...
1
vote
1answer
54 views

Loading Content Across Site Collections (SP Online)

I have a site with a list that holds information about users, extracted from the user profile service in Powershell CSOM; each time the site loads, one of these rows is picked and the info displayed ...
3
votes
1answer
74 views

Remove SharePoint 2010 library authorization using powershell?

I know it's possible to modify a library authorizations using the SharePoint UI following the steps bellow: Stop authorizations inheritance. Modify users authorizations. Select/Unselect the desired ...
4
votes
1answer
384 views

How can I deploy a SharePoint Framework webpart with a Microsoft Graph API query as an add-in?

I have a set of graph queries that return the email addresses for my Office 365 Group members who are also the members of my connected SharePoint Team Site. https://graph.microsoft.com/v1.0/groups?$...
0
votes
1answer
40 views

How can I identify a SharePoint user inside a REST service

For my Intranet application, I am using a 3rd party Javascript library inside my SharePoint page. The widget I want to use accepts a REST service function that it can use, but it does not allow for ...
1
vote
1answer
34 views

minimal rights needed to write powershell scripts

I got some CSOM scripts in a .Net Application, that I have to to move to the server, using the server object model/powershell. As our Sharepoint team has no time and skills, it was decided that I have ...
1
vote
0answers
196 views

Sharepoint 2013 - authentication problems

we have a very different setup on our client. So I will try to explain the scenario as best as I can. We have a Sharepoint 2013 web application that need to be authenticated in another system. So ...
2
votes
0answers
401 views

Is the OAuth implicit grant type supported for provider-hosted add-ins?

The provider of my provider-hosted add-in needs to ask for SharePoint (Online) permissions on the fly. OAuth can be used to achieve this, as documented here in MSDN. The authorization is low-trust ...
1
vote
2answers
586 views

Grant workflow app permission to peoplemanager REST interface

I'm trying to authorize a 2013 workflow (made in SharePoint Designer) to make calls to our root site collections REST api for peoplemanager in Sharepoint Online. All I get back is: {"odata.error":{"...
2
votes
2answers
665 views

Is it possible to set permission at the column level in a list?

I built a list that include several columns and I'm trying to restrict editing permissions of certain users to only one column within the list. I've been able to set permissions only to the entire ...
0
votes
1answer
2k views

SharePoint Online Management Shell : The remote server returned an error: (401) Unauthorized

So I'm using tutorial from here : https://technet.microsoft.com/en-us/library/fp161372.aspx But when I tried to connect, there is an error as above. I have set my credential as global administrator. ...
1
vote
0answers
539 views

OAuth+OpenID+REST JWT Token and Audience working with subdomains?

Ok, so I have used OAuth and gotten my JWT token and I’m having a lot of success using the REST API to do what I want to do (upload/download files and folders) however, when I get a list of sites I ...
0
votes
1answer
71 views

Cannot create users or groups

I'm not quite sure why the New dropdown link is missing within the People and Groups section when i'm logged in as the Site Collection Administrator.
3
votes
2answers
270 views

Is It Possible to assign authorization to views?

I wish that in My site some users can see a view. Are there more authorization options in addition to personal and public view?
7
votes
2answers
474 views

Is it possible to forbid download from libraries to some users?

I have a customer that asked me if is possible to limit authorization to a single library for some users. He wants them to just read the files in the library but to forbid downloading them. I couldn'...
1
vote
0answers
122 views

WCF Authorization via SharePoint Security Model

Would like to implement authentication and authorization operations on non-SharePoint hosted cross-domain WCF service via SharePoint 2010 Security Model, which is Windows Authentication. So, a member ...
0
votes
0answers
110 views

SharePoint Views and Item Level Permissions

I am very familiar with the issues of Item Level Permissions (ILP). However we are having an internal discussion of the combination Views, and ILP. For simplicity sake, there are two views each ...
1
vote
2answers
4k views

Access denied when uploading file using REST API

I am using the Sharepoint Online REST API. I can successfully make the following request: GET /_api/web/GetFileByServerRelativeUrl('/Shared%20Documents/Hello.docx') HTTP/1.1 Host: SITE.sharepoint....
0
votes
1answer
546 views

Prevent users from granting access to “Everyone”

Within our SharePoint 2013 On-Premise farm we want to make sure, that "ordinary" users (namely non site collection administrators) are not able to grant access to the following identities: Everyone / ...
2
votes
0answers
436 views

How to secure the application pages in SharePoint 2013 with Claims authentication

I want to secure the application pages in SharePoint 2013 with Claims authentication, it does not seem to be working. <configuration> <location path="_layouts/15/settings"> <...
3
votes
1answer
1k views

System.UnauthorizedAccessException when accessing list with JSOM

I try to get items from a list with JSOM. But I get a System.UnauthorizedAccessException with error code 2147024891. If I navigate and authenticate to the site with a browser I am able to access the ...
0
votes
1answer
533 views

SPGroup.ContainsCurrentUser intermittently returning false for indirect membership via AD groups

I have a WCF REST service running in SP2013 that is used to determine which SP groups a given user is in (this is called by provider hosted apps, who can't get the relevant info from the CSOM). The ...
1
vote
0answers
396 views

Sending E-Mails in On-Premises environments? (CSOM)

I'm working on an E-Mail function for a SharePoint 2013 provider-hosted App. The code I'm currently using: // Prepare the E-Mail parameters EmailProperties properties = new EmailProperties(); ...
0
votes
1answer
617 views

Use SharePoint Groups in Provider Hosted App (MVC5.0)

I am working on a Provider Hosted App (MVC5.0), but I want to make use of SharePoint Groups. Is this possible to achieve, and how to determine whether a user is in a specific group?
1
vote
0answers
22 views

Sharepoint sites asks autherization continous in Safari 8.0.2 [duplicate]

Sharepoint sites doesn't open in Safari 8.0.2 . It asks authentication continous. How can I solve this problem? Someone adviced to me this :"Change your Form Based Authentication (FBA) to Claims ...
0
votes
1answer
184 views

app-only policy in SharePoint Hosted app

Is it possible to use app-only policy in a SharePoint-Hosted App? All examples on Internet are using Provider-Hosted App which uses Managed code. I would like implement it in a SharePoint-hosted app ...
0
votes
0answers
836 views

Sharepoint 2013 With IE 11 - 401 UNAUTHORIZED

I have authentication problem when used IE to access my SharePoint site. When I enter the address of the site, I don't receive any prompt to enter username and password and I get the error message "...
0
votes
1answer
120 views

Combining claims for authorization

I have a question about claims based authentication. I have setup a webapp with claims and the claims are populated. Both authentication as well as authorization are working. But suppose my user has ...
0
votes
1answer
171 views

User with Contribute and modify cannot add Items to a list

I am currently using SharePoint 2013. I have just added a user to an Active Directory Group with contribute permissions to a Calendar. Unfortunately, the AD group can contribute but the user can't. ...
0
votes
3answers
3k views

Usergroup.asmx returns “UNAUTHORIZED” for *some* groups

I am trying to invoke the "GetUserCollectionFromGroup" method of the UserGroup.asmx web service. I am using the "Web Service" function in Nintex Workflow but I am pretty confident that Nintex is not ...
1
vote
0answers
375 views

Query text to show sites a user can access using Search Results SP2013

I'm looking to show all sites a user has access to through the Search Results web part in SharePoint 2013. I have added it with the query text: contentclass:"STS_Site" contentclass:"STS_Web" ..but ...
4
votes
2answers
2k views

“Sorry, this site hasn't been shared with you.” if using AD Security Groups directly

It's possible to use Sharepoint2013 by permitting a user directly on the site. I can either put it into a SharePoint group or give it the appropriate permissions directly. But if I add a AD security ...
3
votes
1answer
2k views

GetListItems() causes a 401 error but Checkout() works

Just asked this over on StackOverflow, so I apologize for cross-posting, but I thought I might have more luck with a response on this site. I want to get the contents of a SharePoint 2007 list via ...
8
votes
3answers
5k views

OAuth Authentication and Authorization to REST API from a Node.js Javascript program

I have a Javascript that retrieves the UserCollection from a Site and does some other things from the REST API. This script runs in my own Node.js server. Currently, I use HTTP Basic Authentication ...
1
vote
1answer
53 views

Authentication and Authorization

I need to authenticate the user based on Windows AD group credentials Once the user got authenticated the site level, library level or lists level authorization should be derived from SQL data. The ...
2
votes
1answer
6k views

User has edit permissions to list, but can't add new list item

I have a list that automatically gets populated when a user fills in a contact form. The value of the fields of the form get submitted to the list with the help of JavaScript. This works very well ...
1
vote
1answer
151 views

sharepoint hosted app pages authorization

I have multiple pages in a SharePoint 2013 hosted app. I need to restrict access to some of the pages to certain group. what is the best practice to do this?
1
vote
1answer
287 views

Refining Anonymous Access

On my sharepoint site collection I have enabled anonymous access for the "entire web site", and it is, indeed working. However, I find that I cannot choose "Anonymous Users" and add them to any ...
0
votes
1answer
1k views

Access denied for some users - Event ID 1314

I have a really strange problem, some users cannot access my site collection root site, they get a sharepoint error "Access Denied". The event gets logged as shown next in the windows event viewer: ...