What's the deal with Deno? We talk with a major contributor to find out. Listen now.

Questions tagged [authorization]

The function of specifying access rights to resources, which is related to information security and computer security in general and to access control in particular.

Filter by
Sorted by
Tagged with
0
votes
0answers
22 views

Obtain FedAuth Cookie with REST access token for Sharepoint Online

My goal is to create a small "Link-Checker" application. This application should be able to find broken links on any web page. One major issue that I'm facing is how I can check links to our ...
0
votes
0answers
20 views

Accessing SharePoint on-prem REST API from low-trust add-in using authorization code flow possible for every user?

We need to integrate SharePoint Online and SharePoint 2019 on-prem. (But this could be any external system integrating with SP on-prem.) We need to retrieve data from the SharePoint 2019 farm to show ...
0
votes
0answers
19 views

Making OAuth-authenticated cross-domain REST API calls to 2016 on-prem

My question is exactly this question, but specifically this part: how to use OAuth in SP 2016 on-prem from JavaScript? Which authentification endpoint must be used? Which flows are supported? We are ...
0
votes
0answers
27 views

System.UnauthorizedAccessException while trying through rest api.I am trying to get list of files in the folder

I have a sharepoint url access from front end and i am trying to access it through REST API in python url = "mysharepoint_url/_api/web/GetFolderByServerRelativeUrl('" + folder + "')/Files" header = {'...
1
vote
1answer
151 views

How to authenticate a Java Job at Sharepoint Online

I want to manupulate (read, write, delete) files in a document library of my sharepoint (hosted at Sharepoint Online). Ultimately this will be Part of a Java Webapplication where a backend job runs ...
0
votes
0answers
33 views

SharePoint integration without storing user access token in a third party system

I'm new to SharePoint development, and I having doubts about the integration. We're using a custom Document Management System (DMS) and we want to integrate it with a SharePoint app. So, the DMS ...
1
vote
1answer
209 views

Upload File to Sharepoint without storing Username/Password

We want to upload files to SharePoint as part of CI/CD in Github (Actions). I've found how to do this using REST api, but that requires username/password. Also bearer tokens work, but we need a ...
0
votes
1answer
346 views

Authentication methods for SharePoint REST API

Let's say I work in company AAA and want to automatically upload documents to BBB's company SharePoint Online application https://BBB.sharepoint.com using REST API. My email username@AAA.com is ...
0
votes
2answers
52 views

user can't log in SharePoint however he has an authorization

I'm a admin for a site in sharepoint online 365, I give an authorisation total control for user, however he can't access to site.but he can access in other sites. he receives a error message: Access ...
0
votes
1answer
38 views

Security issue SharePoint Online by Office desktop

We have a serious issue to secure Sharepoint Online. We require (and configured) the use of MFA with the Authenicator-app or sms. We have configured sign out inactive users and don't give the option ...
0
votes
2answers
26 views

SharePoint windows Authentication with Custom Authorization

Is there any way to configure windows Authentication with Custom Authorization in SharePoint 2013/2016. We want user to be authenticated with window credentials and SharePoint objects should be ...
0
votes
1answer
42 views

Authorizing users on an on-premise service from SharePoint Online intranet

I'm reading up on SharePoint Online as a candidate for our upcoming intranet, and have a couple of questions. Let's say I need our users to access some on-premise data, and I write a provider based ...
2
votes
2answers
2k views

Calling Sharepoint Online API using Azure AD Registered App

I registered an app in Azure Active Directory and granted several privileges: Then I got myself a bearer token by calling: https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token with ...
0
votes
1answer
37 views

Hiding New Folder Command for specific users

The image below shows a way to disable Folder creation for the entire Document Library. Is there a way to limit this functionality to specific users / groups?
0
votes
1answer
49 views

Creating a secure .Net WebAPI for Sharepoint

I have created a Custom Web API using .net C# that will be called in my sharepoint online and i was wondering if is there is anything i could use from sharepoint and use it in my WebApi to verify that ...
0
votes
1answer
66 views

How to allow access to list item file attachments that was not created by the user with special constraints

I am struggling for some time with this problem and can't decide how to handle it. We have a sharepoint list with 3 groups of users: SOHO Account Managers SMB Account Managers ENT Account Managers ...
1
vote
1answer
34 views

How to set up user authorization by certificate on SharePoint 2016?

I need to authorize users not only by login/password but also by individual certificates. How can I create such certificates manually and configure SharePoint to prompt certificate for authorization ...
0
votes
1answer
59 views

User+Add-in authorization on SharePoint Online

We'd like to develop an on-provider web app which can import documents from a Sharepoint instance. Right now we are focusing on Sharepoint Online, but later on, we will create on-premise solutions as ...
1
vote
2answers
883 views

WebRequest to Sharepoint site using Access Token returns 403

I need to create web request to specific page in SharePoint Online using Access Token in order to get certain Header information, but I keep getting 403 and I'm not sure why. After toying with access ...
1
vote
0answers
235 views

SharePoint + “/_api/SP.Utilities.Utility.SendEmail” + not working for specific account

Ours is a SharePoint 2016 On Prem env. We have developed a custom component which uses "/_api/SP.Utilities.Utility.SendEmail" to send email. Email is getting sent. Except for a specific account. ...
1
vote
2answers
37 views

prevent deletion permission on file/folder level

I have a question on this site permission/access level thing. This is my requirement. All users of the overall site get permission to view, edit and delete files and folders. Yet there is one folder/...
0
votes
1answer
4k views

How to perform POST operations in SharePoint 2013 using REST API from external Application

I am trying to perform POST operations in SharePoint 2013 environment using REST API from external application running under the same company domain. Till now I am to do the GET operation successfully ...
22
votes
6answers
59k views

SharePoint Online REST API Authentication In POSTMAN

I am trying to authenticate with the REST API for a list in SharePoint Online using POSTMAN. For example, the URL for my site looks something like this: https://mytenantname.sharepoint.com/sites/...
0
votes
2answers
128 views

How to allow only authorised admin to use the “Edit”, “Page” Ribbon in SP2013?

I'm trying to make the Ribbon such that only authorized admin (permissions set in the site permissions feature) can use the Ribbon controls (Browse, Edit, Page). How do I prevent unauthorized users ...
0
votes
1answer
715 views

SharePoint Online returns 401 for any call, right after getting access token

I unable to perform any request to SharePoint Online via REST Api. It was used service high-trust authorization (App Only) to get access token. JSON Web Token, I've got, looks valid, see decoded ...
1
vote
1answer
78 views

Loading Content Across Site Collections (SP Online)

I have a site with a list that holds information about users, extracted from the user profile service in Powershell CSOM; each time the site loads, one of these rows is picked and the info displayed ...
3
votes
1answer
79 views

Remove SharePoint 2010 library authorization using powershell?

I know it's possible to modify a library authorizations using the SharePoint UI following the steps bellow: Stop authorizations inheritance. Modify users authorizations. Select/Unselect the desired ...
4
votes
1answer
422 views

How can I deploy a SharePoint Framework webpart with a Microsoft Graph API query as an add-in?

I have a set of graph queries that return the email addresses for my Office 365 Group members who are also the members of my connected SharePoint Team Site. https://graph.microsoft.com/v1.0/groups?$...
0
votes
1answer
42 views

How can I identify a SharePoint user inside a REST service

For my Intranet application, I am using a 3rd party Javascript library inside my SharePoint page. The widget I want to use accepts a REST service function that it can use, but it does not allow for ...
1
vote
1answer
35 views

minimal rights needed to write powershell scripts

I got some CSOM scripts in a .Net Application, that I have to to move to the server, using the server object model/powershell. As our Sharepoint team has no time and skills, it was decided that I have ...
1
vote
0answers
264 views

Sharepoint 2013 - authentication problems

we have a very different setup on our client. So I will try to explain the scenario as best as I can. We have a Sharepoint 2013 web application that need to be authenticated in another system. So ...
2
votes
0answers
517 views

Is the OAuth implicit grant type supported for provider-hosted add-ins?

The provider of my provider-hosted add-in needs to ask for SharePoint (Online) permissions on the fly. OAuth can be used to achieve this, as documented here in MSDN. The authorization is low-trust ...
1
vote
2answers
874 views

Grant workflow app permission to peoplemanager REST interface

I'm trying to authorize a 2013 workflow (made in SharePoint Designer) to make calls to our root site collections REST api for peoplemanager in Sharepoint Online. All I get back is: {"odata.error":{"...
2
votes
2answers
2k views

Is it possible to set permission at the column level in a list?

I built a list that include several columns and I'm trying to restrict editing permissions of certain users to only one column within the list. I've been able to set permissions only to the entire ...
0
votes
1answer
3k views

SharePoint Online Management Shell : The remote server returned an error: (401) Unauthorized

So I'm using tutorial from here : https://technet.microsoft.com/en-us/library/fp161372.aspx But when I tried to connect, there is an error as above. I have set my credential as global administrator. ...
1
vote
0answers
698 views

OAuth+OpenID+REST JWT Token and Audience working with subdomains?

Ok, so I have used OAuth and gotten my JWT token and I’m having a lot of success using the REST API to do what I want to do (upload/download files and folders) however, when I get a list of sites I ...
0
votes
1answer
85 views

Cannot create users or groups

I'm not quite sure why the New dropdown link is missing within the People and Groups section when i'm logged in as the Site Collection Administrator.
3
votes
2answers
352 views

Is It Possible to assign authorization to views?

I wish that in My site some users can see a view. Are there more authorization options in addition to personal and public view?
7
votes
2answers
587 views

Is it possible to forbid download from libraries to some users?

I have a customer that asked me if is possible to limit authorization to a single library for some users. He wants them to just read the files in the library but to forbid downloading them. I couldn'...
1
vote
0answers
138 views

WCF Authorization via SharePoint Security Model

Would like to implement authentication and authorization operations on non-SharePoint hosted cross-domain WCF service via SharePoint 2010 Security Model, which is Windows Authentication. So, a member ...
0
votes
0answers
114 views

SharePoint Views and Item Level Permissions

I am very familiar with the issues of Item Level Permissions (ILP). However we are having an internal discussion of the combination Views, and ILP. For simplicity sake, there are two views each ...
1
vote
2answers
5k views

Access denied when uploading file using REST API

I am using the Sharepoint Online REST API. I can successfully make the following request: GET /_api/web/GetFileByServerRelativeUrl('/Shared%20Documents/Hello.docx') HTTP/1.1 Host: SITE.sharepoint....
0
votes
1answer
694 views

Prevent users from granting access to “Everyone”

Within our SharePoint 2013 On-Premise farm we want to make sure, that "ordinary" users (namely non site collection administrators) are not able to grant access to the following identities: Everyone / ...
2
votes
0answers
513 views

How to secure the application pages in SharePoint 2013 with Claims authentication

I want to secure the application pages in SharePoint 2013 with Claims authentication, it does not seem to be working. <configuration> <location path="_layouts/15/settings"> <...
3
votes
1answer
1k views

System.UnauthorizedAccessException when accessing list with JSOM

I try to get items from a list with JSOM. But I get a System.UnauthorizedAccessException with error code 2147024891. If I navigate and authenticate to the site with a browser I am able to access the ...
0
votes
1answer
605 views

SPGroup.ContainsCurrentUser intermittently returning false for indirect membership via AD groups

I have a WCF REST service running in SP2013 that is used to determine which SP groups a given user is in (this is called by provider hosted apps, who can't get the relevant info from the CSOM). The ...
1
vote
0answers
449 views

Sending E-Mails in On-Premises environments? (CSOM)

I'm working on an E-Mail function for a SharePoint 2013 provider-hosted App. The code I'm currently using: // Prepare the E-Mail parameters EmailProperties properties = new EmailProperties(); ...
0
votes
1answer
668 views

Use SharePoint Groups in Provider Hosted App (MVC5.0)

I am working on a Provider Hosted App (MVC5.0), but I want to make use of SharePoint Groups. Is this possible to achieve, and how to determine whether a user is in a specific group?
1
vote
0answers
22 views

Sharepoint sites asks autherization continous in Safari 8.0.2 [duplicate]

Sharepoint sites doesn't open in Safari 8.0.2 . It asks authentication continous. How can I solve this problem? Someone adviced to me this :"Change your Form Based Authentication (FBA) to Claims ...
0
votes
1answer
187 views

app-only policy in SharePoint Hosted app

Is it possible to use app-only policy in a SharePoint-Hosted App? All examples on Internet are using Provider-Hosted App which uses Managed code. I would like implement it in a SharePoint-hosted app ...