Skip to main content

Questions tagged [security]

Security is the protection of information and property from theft.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

Can Admins tell if a User downloads a file from Sharepoint by opening the file in desktop app and saving a copy?

Obviously Admins can see the Sharepoint and security logs if a user downloads a file from Sharepoint. But what I would like to understand is whether or not we can tell if a user downloads that file by ...
User837478's user avatar
1 vote
1 answer
25 views

How to Prevent Auto-Labeling from Reapplying Incorrect Labels to Specific Files?

I have created an auto-labeling policy that works well overall. However, for a few files, the labels applied are incorrect. When I manually remove the label, it gets reapplied automatically. Is there ...
Aakash Maurya's user avatar
0 votes
1 answer
23 views

How to make my SharePoint home page accessible to the public and profile page secured with login?

Accessing my SharePoint site currently needs login but I want the home page to be accessible to the entire public without any issue while the profile page would be accessible only by logging in. How ...
Adediji's user avatar
0 votes
0 answers
27 views

Connecting my on-premsies asp.net core console application with SharePoint online using ClientID, ClientSecret & Certificate. is this secure

I have developed an asp.net core 6 console application that is hosted inside an on-premises windows VM. and i am connecting to SharePoint uisng a clientID, ClientSecret & Certifficate, as follow:- ...
microsoftdeveloperdesigner's user avatar
0 votes
0 answers
12 views

Embedding Sharepoint PDF document only knowing file name

I would like to embed Sharepoint-hosted PDF documents in an iframe in a (non sharepoint) application on a different domain. I have several hundreds of these documents listed by my client but I only ...
guillaume31's user avatar
0 votes
1 answer
20 views

Looking for a Data Protection solution for Microsoft SharePoint - File protection and AGSCS compliant

I have been asked if there is any third party tool or some way store document and files in a very secure environment. Basically another layer of security. Can SharePoint Online ne used for this orwe ...
naijacoder's user avatar
  • 4,284
0 votes
0 answers
402 views

SharePoint Online: Due to organizational policies, you can't access this resource from this untrusted device

I am configuring an Office 365 tenant with Microsoft Purview sensitivity labels and I configured a Label that blocks access from unmanaged devices. I configured my PC to be compliant, adding it to the ...
user20035's user avatar
0 votes
1 answer
33 views

Does external sharing (link and/or direct sharing) with M365 users (external) result in user creation in AD as guest user?

Link: https://learn.microsoft.com/en-us/sharepoint/what-s-new-in-sharing-in-targeted-release Recipients of secure external sharing who also use Microsoft 365 in their organization can sign in using ...
variable's user avatar
  • 4,429
0 votes
2 answers
208 views

File sharing via link share or direct access or grant - breaks inheritance

I have a doc library with folders and subfolders. When I share a subfolder using either link sharing or direct or grant then the permission inheritance on the subfolder breaks. Thus now if I add a new ...
variable's user avatar
  • 4,429
0 votes
0 answers
27 views

How to know if I can trust an SPFX webpart?

I am in the process of implementing an spfx webpart but before I need to make sure it is not a security threat. From researching I was not able to find if there is any way to run a check or provide a ...
Santiare's user avatar
0 votes
0 answers
52 views

Cannot open Office documents - repeating log in window

we use SharePoint 2019 on-premise and Office 365. Sometimes some users have problem when they open Word or Excel, it opens Windows Security window and after log in,it is repeatly opening. I know, that ...
Zbyna's user avatar
  • 149
0 votes
1 answer
13 views

One user and one guest in Office 365 but Sharepoint lists 6 users

A client of mine subscribes Office 365. He is the only full user, and there is only one guest user that has access to some shared folders in One Drive. However, when he goes to SharePoint>Manage ...
itmonitor's user avatar
0 votes
1 answer
352 views

It is fine if we store the Chat GPT api key inside the SPFx web part properties

I want to embed a chat GPT inside our SharePoint and i found this web part @ https://github.com/pnp/sp-dev-fx-webparts/tree/main/samples/react-chat-gpt .but the issue is that it stores the Chat GPT ...
John John's user avatar
0 votes
1 answer
48 views

Secure the SharePoint lists from allowing Project Manager to add users inside a Projects the PM is not defined inside it

We are in the Design phase of a Project Management system, and we have 2 technical approaches to follow:- SharePoint as the Back-end + Power Apps & Power Automate SQL server as the Back-end + ...
John John's user avatar
0 votes
2 answers
91 views

How secure is SharePoint Server 2019 compared to 2016

I'm actually in a small battle to propose SharePoint 2019 to my company. They want to go to 2016 as migration from 2013 will be "faster" (skipping the upgrade hop). I know that I can make ...
Jan's user avatar
  • 303
0 votes
1 answer
19 views

Sharepoint Security Question Deletion

How to allow a top-level user to delete items but not folders, or columns? How to go around with this?
Hans Kristensen's user avatar
1 vote
0 answers
353 views

How to secure the 2-stage approval application using SharePoint & Power Apps & Power Automate

We have a travel request application. where a user submit a request where it should go into 2 stages of approval process before it gets Final Approval. Now we did the following:- Create a SharePoint ...
John John's user avatar
0 votes
1 answer
615 views

Is there any security issue in using dangerouslySetInnerHTML to render HTML Code inside our React.js sharepoint modern web-part

I am trying to build a React JS SharePoint modern web part, which have the following capabilities: Inside the Web Part settings page >> there are 2 fields named as "Who We Are" & &...
John John's user avatar
0 votes
1 answer
60 views

Permissions tab is disabled for the owner

I am the owner of an SP online site and the permissions tab has been disabled for me. Url of the above page is: https://Tenant.sharepoint.com/sites/SiteName/_layouts/15/user.aspx?obj=%7BIDDDDDD%7D,...
Mohsen Sichani's user avatar
0 votes
0 answers
242 views

Can I have dynamic, group-based item-level security on a SharePoint list?

In SharePoint online lists I know how to have all list items visible to all users with permission on the list. I also know how to have items visible only to the user who created the item, or to users ...
Darryl's user avatar
  • 146
1 vote
1 answer
159 views

SharePoint IP Address Restrictions on Anonymous sharing

My goal is to restrict access on my web excel documents from outside my organization. This works fine on all my OneDrive files except the ones I'm sharing anonymously. For example I have a document on ...
edward ewerus's user avatar
0 votes
1 answer
114 views

Restrict content access based on intranet/Internet access

Hi Expert Sharepoint architectures, Our IT director is inquiring about if it's possible to limit the content access based on the network access (intranet or Internet)? For example, user has full/...
David L.'s user avatar
  • 129
1 vote
2 answers
2k views

How to restrict access to file based on metadata?

I'm looking for a way to restrict access to certain types of records based on their metadata. Basically there are some types of files that all employees in a team should see, and some they shouldn't (...
Jess Taylor's user avatar
0 votes
3 answers
465 views

How we can secure the ClientID & ClientSecret inside our remote event receivers (Inside SharePoint Provider hosted app)

I have developed many remote event receivers and host them inside azure web apps. now the web.config file inside those remote event receivers contain the ClientId & ClientSecret, as follow:- <...
John John's user avatar
1 vote
0 answers
85 views

Auditing PowerShell Activity

I can see changes made to SharePoint Online using the available audit logs etc. But I don't see PowerShell activity by admins or others. Most like a person who is going to hack the platform is going ...
motionpotion's user avatar
  • 2,267
0 votes
2 answers
405 views

Notification for When External Users Join

We have a few sites that require external access at the folder level. The external user has to be in Active Directory before adding to folder permissions so we created a new group 'External Users' and ...
Michael Colbs's user avatar
1 vote
1 answer
140 views

SharePoint 2019 Security group AD group

There are few security groups in my SharePoint site .AD groups are added to the security groups. Is there any way using REST API to find out that the current user belongs to which all security groups ....
Pp25's user avatar
  • 21
0 votes
1 answer
213 views

How to restrict the server login Prompt and redirect to home page of application

I have one internet publishing SharePoint Site. How to restrict the server login Prompt and redirect to home page of application For example i have my site: https://*****/products/pages/default.aspx ...
user3520155's user avatar
0 votes
1 answer
613 views

Restrict to _vti_bin folder in all subsites for external SharePoint Sites

Hi as per company security compliance anonymous users should not access _vti_bin folder and services inside this folder. we have an external SharePoint site accessible for anonymous users. if I ...
user3520155's user avatar
0 votes
1 answer
2k views

If we Disable TLS 1.0,TLS 1.1 and Enable only TLS 1.2 Support in SharePoint 2013 Servers?

Hi according to our security policies if we disable TLS 1.0,1.1 and enable only TLS 1.2 in SharePoint servers is there any impact to SharePoint Farm and its Services. TLS 1.2 will support in ...
user3520155's user avatar
0 votes
1 answer
21 views

mandatory tests with SPO/Forms

is there a way to create a mandatory security training with SPO/Forms? All users should be forced to go through a regular IT security training with a short test at the end. Is there a way/policy to ...
simon1608's user avatar
0 votes
1 answer
27 views

How can I set up my site so it works like a post-box?

Hard to explain in one line, so full analogy: You go to the post box to send a paper letter. 30 other people do the same. I can put my letter in, but I can't get other people's letters out. Moreover, ...
Ne Mo's user avatar
  • 111
0 votes
1 answer
77 views

Can you set the permissions for a user when you share an SP site with them (as a member)?

Scenario: I create a new team site (without O365 group) from the Admin center. I added a few users to the Member group so they have edit permissions on the site. Current behaviour: These members are ...
Krishant L's user avatar
0 votes
1 answer
376 views

SharePoint 2013 Public site how to test SQL Injection attacks vulnerability

Hi In SharePoint 2013 Public site how to test SQL Injection attacks ? In SharePoint 2013 web application i deployed some custom web parts,displaying data from custom lists to pages etc
user3520155's user avatar
0 votes
1 answer
317 views

Which security patches should i install every month for SharePoint 2013

In SharePoint 2013 which security patches should i install every month and i don't want to install all Cumulative updates every month because of size also one reason. like for example Aug 2020 https://...
user3520155's user avatar
0 votes
1 answer
15 views

How to grant access to all site data but disallow list modifications

I'm creating a SPO site that will serve as the backend for a PowerApp. Several lists will have item level permissions so that only users who created the data will be able to view it. The app will have ...
ARich's user avatar
  • 103
0 votes
2 answers
32 views

How to apply security patch in SharePoint 2010 without upgrading to cumulative update?

Microsoft releases security bulletin every month which also include SharePoint vulnerabilities. We have many sites running on my SharePoint 2010 instance, and if we apply cumulative update according ...
chacha2.0's user avatar
0 votes
1 answer
1k views

How to mask a field like SSN or ID field?

Is there way to mask a field like social security number or ID field? I like mask field both in list view level, edit form and view form. Is it possible? Sharepoint 2013 (we have nintex form as well)
ruby's user avatar
  • 17
0 votes
1 answer
93 views

Can't Create Session

I am trying to update a custom authentication page from SharePoint 2010 to 2013. It basically takes credentials from a CAC card and creates them a user account in FBA if they didn't already have one ...
Brian Rood's user avatar
0 votes
1 answer
594 views

How to stop malicious files (XSS files) upload even for admin users who have full permissions to site collection

Hi In SharePoint how to stop malicious files (XSS files) upload even for admin users who have full permissions to site collection. For example, in a custom list or document library, no one can upload ...
adilahmed's user avatar
  • 2,965
0 votes
1 answer
85 views

Can O365 Security and Compliance Alert Policies be limited to a single document library?

I've been trying to use the Alert Policies in the Office 365 Security and Compliance center to build an alert policy for a single high security document library. I want to get an alert for when people ...
gtew234's user avatar
  • 219
1 vote
3 answers
255 views

Sharepoint online item level permissions

I have a document library in which I have a folder called sharepoint and with in that folder it has some important data. Now I want to access the above folder and it content only to a specific group. ...
santosh kondapalli's user avatar
0 votes
1 answer
770 views

CSS was ignored due to mime type mismatch

I am working on client side web part using JavaScript and CSS for customization. I have added custom css and JS into the page and I am getting the message on console of the browser i.e. CSS was ...
users1100's user avatar
  • 3,230
1 vote
1 answer
102 views

Principle of least privilege on Office 365 OneDrive for Business

Does anyone know how to implement the principle of least privilege on OneDrive for Business on an Office 365 tenant? I would like to have a way for an automated process to be able to only upload to a ...
André Borie's user avatar
1 vote
1 answer
337 views

Set default or Global Site Collection permissions in SharePoint Online

In SharePoint Server on-prem, we had WebApplication-level permission policies that could allow the administrator to setup certain users or groups to have a set of permissions on All site collections ...
willman's user avatar
  • 3,724
0 votes
1 answer
76 views

Site Permissions Flyout Menu

I'm curious why site permissions load on some sites and not others. This particular one doesn't show anybody but on another site, it shows Owners, Members and Visitor group memberships
Michael Colbs's user avatar
0 votes
1 answer
349 views

SharePoint Online Site inherit security group from hubsite

Is there a PowerShell script/cmdlet (pnp/spo) to inherit securitysettings from hubsite? All sites linked to hubsite https://tenant.sharepoint.com/sites/marketing should have the same permission ...
Emiel's user avatar
  • 99
0 votes
1 answer
861 views

How to remove RoleAssignments from SPListItem/SPFolder correctly in SharePoint

In the library, I have ParentFolder which contains SubFolder. I have broken role inheritance in both ParentFolder and SubFolder (via a web interface). But when I remove role assignment for the user ...
Arucard's user avatar
0 votes
1 answer
345 views

Custom web part unable to call custom web API

I'm unable to get my custom web part to connect to my custom Web API. Ultimately, my goal is to secure the API using Azure AD and then call that API from my web part. In the local workbench, I'm ...
TheIronCheek's user avatar
1 vote
1 answer
894 views

Why http PUT can upload file successfully to SharePoint?

We are using SP2016 on-premise. In order to handle security test I prepared a PowerShell script to test upload with PUT/POST. $Digest = $response.getcontextwebinformation.FormDigestValue $headers = ...
Mark L's user avatar
  • 4,065

1
2 3 4 5
13