Questions tagged [security]

Security is the protection of information and property from theft.

Filter by
Sorted by
Tagged with
0
votes
1answer
15 views

How to mask a field like SSN or ID field?

Is there way to mask a field like social security number or ID field? I like mask field both in list view level, edit form and view form. Is it possible? Sharepoint 2013 (we have nintex form as well)
0
votes
1answer
5 views

Can't Create Session

I am trying to update a custom authentication page from SharePoint 2010 to 2013. It basically takes credentials from a CAC card and creates them a user account in FBA if they didn't already have one ...
0
votes
1answer
1k views

How can I secure _vti_pvt folders?

I am dealing with a security report from an external contractor, in which there is a finding labeled as a medium risk. It is titled IIS .cnf file leakage. This is somewhat confusing to me, since ...
0
votes
1answer
1k views

User Authentication in Sharepoint and OTP

Currently we have SharePoint installed in our production environment. We are only on intranet currently, but we would like to make our SP accessible from internet and web URLs. Currently for ...
3
votes
3answers
2k views

SharePoint 2010 - disable SSLv3 and TLS 1.0

I'm tasked to figure out how to disable SSLv3 and TLS 1.0 on SharePoint 2010 farm. After some reading, I came to the following conclusions: It is safe to disable SSLv3 on SharePoint servers, It is ...
6
votes
3answers
8k views

Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given

Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying: This action couldn't be performed because Office doesn't recognize the ...
0
votes
1answer
11 views

How to stop malicious files (XSS files) upload even for admin users who have full permissions to site collection

Hi In SharePoint how to stop malicious files (XSS files) upload even for admin users who have full permissions to site collection. For example, in a custom list or document library, no one can upload ...
0
votes
1answer
14 views

Can O365 Security and Compliance Alert Policies be limited to a single document library?

I've been trying to use the Alert Policies in the Office 365 Security and Compliance center to build an alert policy for a single high security document library. I want to get an alert for when people ...
0
votes
0answers
17 views

How can you protect against data-greedy users?

My department is responsible for providing reports using a variety of SharePoint lists. The problem I'm facing is that other departments are overstepping their boundaries by doing what amounts to a "...
3
votes
2answers
4k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
6
votes
2answers
3k views

Error : Group cannot be found

I deleted Team Site Owners group from the top level team site in SharePoint Online and found that the people and groups link from the settings page is not working, throwing an error: Group cannot ...
1
vote
3answers
36 views

Sharepoint online item level permissions

I have a document library in which I have a folder called sharepoint and with in that folder it has some important data. Now I want to access the above folder and it content only to a specific group. ...
0
votes
0answers
29 views

CSS was ignored due to mime type mismatch

I am working on client side web part using JavaScript and CSS for customization. I have added custom css and JS into the page and I am getting the message on console of the browser i.e. CSS was ...
0
votes
1answer
733 views

Determine what user was deleted from a security group in the audit logs

I have configured the site collection audit settings to monitor permission changes. In the Audit log reports->Security settings I get an excel report with Security Group Member Delete events. The ...
0
votes
0answers
11 views

How to securize redirection with Azure AD in a WebPart?

I have developed a Sharepoint Webpart. The aim of this component is simple, authenticate the user in an external website that is embedded inside de Sharepoint. The external website uses Azure AD to ...
2
votes
1answer
961 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
1
vote
1answer
29 views

Principle of least privilege on Office 365 OneDrive for Business

Does anyone know how to implement the principle of least privilege on OneDrive for Business on an Office 365 tenant? I would like to have a way for an automated process to be able to only upload to a ...
1
vote
1answer
37 views

Set default or Global Site Collection permissions in SharePoint Online

In SharePoint Server on-prem, we had WebApplication-level permission policies that could allow the administrator to setup certain users or groups to have a set of permissions on All site collections ...
0
votes
1answer
1k views

Need script to list Groups by Team Site

I am trying to find PowerShell scripts that do the following: List all TeamSites. List all TeamSites, Groups that belong to that TeamSite with their permissions. List all TeamSites, Groups that ...
1
vote
1answer
1k views

Encrypt sharepoint online list columns

I'm somewhat proficient in development but have basic knowledge about SharePoint and Sharepoint Online. I would like to add an encryption thing to my Sharepoint Online list columns make it possible ...
1
vote
1answer
638 views

Why the security trimming doesn't apply?

It seems that the security trimming doesn't apply for the Quick Launch in SharePoint 2013. I've created 2 lists with broken role inheritance and assigned permissions to a different group for each ...
0
votes
1answer
28 views

Site Permissions Flyout Menu

I'm curious why site permissions load on some sites and not others. This particular one doesn't show anybody but on another site, it shows Owners, Members and Visitor group memberships
6
votes
3answers
9k views

The context has expired and can no longer be used. (Exception from HRESULT: 0x80090317)

I am facing this error all day long and I have not figured it out yet. I have tried: setting the date time zone in the web application to match that of the server set "security validation expires" to ...
0
votes
0answers
10 views

About Cross Site Request Forgery prevention on SharePoint 2016

We are using SP2016 on-premise. The Web Page Security Validation is turned on as default with Security validation expires = 30 minute. The SharePoint is installed on MyCompany.com intranet with NTLM ...
0
votes
1answer
93 views

SharePoint Online Site inherit security group from hubsite

Is there a PowerShell script/cmdlet (pnp/spo) to inherit securitysettings from hubsite? All sites linked to hubsite https://tenant.sharepoint.com/sites/marketing should have the same permission ...
0
votes
0answers
229 views

FormDigest control problems after September 10, 2019 Security Update

I've noticed some weird behaviour of Microsoft.SharePoint.WebControls.FormDigest control after last security update. Control is added to every page by setting following code in masterpage: <asp:...
0
votes
1answer
39 views

How to remove RoleAssignments from SPListItem/SPFolder correctly in SharePoint

In the library, I have ParentFolder which contains SubFolder. I have broken role inheritance in both ParentFolder and SubFolder (via a web interface). But when I remove role assignment for the user ...
0
votes
1answer
83 views

Custom web part unable to call custom web API

I'm unable to get my custom web part to connect to my custom Web API. Ultimately, my goal is to secure the API using Azure AD and then call that API from my web part. In the local workbench, I'm ...
1
vote
0answers
41 views

Why http PUT can upload file successfully to SharePoint?

We are using SP2016 on-premise. In order to handle security test I prepared a PowerShell script to test upload with PUT/POST. $Digest = $response.getcontextwebinformation.FormDigestValue $headers = ...
2
votes
1answer
107 views

Can SharePoint 2010 support validateRequest=“true”?

By default, web application web.configs have validateRequest="false". Changing it to true breaks SharePoint significantly, based on my own trials. People Pickers don't work, half the form pages don't ...
0
votes
0answers
12 views

Migrate SharePoint Column Encryption / Decryption using RSA Machine-Level Crypto

I'm actively trying to find the best way to migrate machine-level encryption to a new server that will be running SharePoint 2019. We use the RSACryptoService.cs to encrypt data being stored in a ...
0
votes
1answer
28 views

SharePoint 2016 Online Information List out of sync

Help! I'm adding users to SP Security Groups but they aren't updating on the Information List so users keep getting the Request Access page when then click on a link. First and most important how ...
2
votes
1answer
133 views

What exactly “manage trust” in CA is doing? (on-premise)

I have experience on setting up SP2010, 2013 and 2016. In order to install SSL cert and to support https to browse SharePoint, beside install the cert in IIS, usually we need to import the certificate ...
2
votes
2answers
44 views

When opening a file, a warning 'insecure or coming from untrusted source' appears

I inherited SharePoint without knowing anything about it and it crashed hard a few weeks ago but we were able to restore most functionality and this is the only thing that is left. When I open any ...
0
votes
2answers
46 views

Sharepoint 2013 limited access

quick question - we have a bunch of libraries from A to Z with broken permissions and dedicated SP groups to them only. The only issue we've got is with one particular library - all the other groups ...
6
votes
2answers
19k views

How do I disable “Get a Link” & “Share”

My department is exploring SharePoint as an alternative to fileshares. Typically we create documents, then email links to the document. it seems there are many types of links, which is confusing and ...
1
vote
2answers
2k views

Remove user/group from everyone group SharePoint online

Is there a way to exclude a user or group from the 'everyone' security group in SP Online? The reason I ask is we have blog site which everyone needs to be able to contribute to, simple - but we ...
1
vote
0answers
95 views

Excessive Vulnerability Count in Yeoman SharePoint Generator

When I run yo @microsoft/sharepoint and pick standard options for a SharePoint Online WebPart with No JavaScript framework, NPM shows 1956 vulnerabilities with 140 of them being high priority. I ...
0
votes
0answers
178 views

Location Based Access To SharePoint Online Site Collection

Currently, there is an IP address location restriction applied in Azure to prevent access to all of our O365 tenant. Access to our tenant from outside of our organisation is disabled based on an IP ...
1
vote
2answers
949 views

Not able to break permission using SharePoint 2013 Designer Workflow

I'm unable to break permission using SharePoint 2013 Designer Workflow, it throws this error: {"error":{"code":"-2147024891, System.UnauthorizedAccessException","message":{"lang":"en-US","value":"...
0
votes
2answers
787 views

“The server farm account should not be used for other services”, but isn't in any group

I have 2 accounts setup form my SharePoint Server (SPAdmin and SPServices). SPAdmin is in the local server's administration group and is the Farm Admin. I am running SharePoint 2013 Enterprise. In ...
3
votes
4answers
3k views

How do I find out what a group has permission to?

I'm cleaning up a farm that has loads of junk groups on it. Is there an easy way to tell if any of these groups have been assigned access to anything? The intention is to delete groups that have ...
0
votes
0answers
132 views

Can I disable “Allow double escaping” on a SharePoint web site?

We're working on hardening our SharePoint server, and STIG V-76825 IISW-SI-000229 mandates that "Double encoded URL requests must be prohibited by any IIS 8.5 website". Basically, editing the Request ...
0
votes
1answer
32 views

Allow files to be shared, with a label

Label within AIP/ARM can be used to restrict sharing with external users. But is there a way to do the opposite? So I would like to allow users to share specific files when a certain label is added. ...
0
votes
1answer
12 views

setting up and limiting access to specific fields in a record

We have 3 different groups of people who are adding data to a table or group of tables. We need to restrict viewing of the data at the field level for 2 groups of people. We also have a need to ...
1
vote
2answers
62 views

SharePoint and OpenPGP file encryption

If I have SharePoint on an azure cloud which can be accessed from any computer using a browser, is it possible to integrate client side PGP encryption so when files are uploaded, they are encrypted ...
0
votes
1answer
44 views

Is there anyway to restrict FOLDER access by IP address?

We want to publish some Data for our team, this Data is restricted to only team members, but, we want them to access it only by 1 IP without restricting access to other folders.
0
votes
1answer
54 views

Sharepoint Online: How to display internal corporate websites, without HTTPS?

We have several internal web applications that do not require the HTTPS protocol, as they are purely accessible internally within our intranet. Obviously with Sharepoint Online, our websites will not ...
0
votes
1answer
87 views

html or javascript code injection in sharepoint

How safe is SharePoint with Code injection (HTML,Javsscript, SQL) because for example the Announcements list allows to enter embed Code in the TextBox. Can this be a threat or SharePoint is already ...
0
votes
1answer
42 views

Creating a secure .Net WebAPI for Sharepoint

I have created a Custom Web API using .net C# that will be called in my sharepoint online and i was wondering if is there is anything i could use from sharepoint and use it in my WebApi to verify that ...

1
2 3 4 5
12