Questions tagged [security]

Security is the protection of information and property from theft.

Filter by
Sorted by
Tagged with
0
votes
1answer
15 views

How to mask a field like SSN or ID field?

Is there way to mask a field like social security number or ID field? I like mask field both in list view level, edit form and view form. Is it possible? Sharepoint 2013 (we have nintex form as well)
0
votes
1answer
5 views

Can't Create Session

I am trying to update a custom authentication page from SharePoint 2010 to 2013. It basically takes credentials from a CAC card and creates them a user account in FBA if they didn't already have one ...
0
votes
1answer
11 views

How to stop malicious files (XSS files) upload even for admin users who have full permissions to site collection

Hi In SharePoint how to stop malicious files (XSS files) upload even for admin users who have full permissions to site collection. For example, in a custom list or document library, no one can upload ...
0
votes
1answer
15 views

Can O365 Security and Compliance Alert Policies be limited to a single document library?

I've been trying to use the Alert Policies in the Office 365 Security and Compliance center to build an alert policy for a single high security document library. I want to get an alert for when people ...
0
votes
0answers
17 views

How can you protect against data-greedy users?

My department is responsible for providing reports using a variety of SharePoint lists. The problem I'm facing is that other departments are overstepping their boundaries by doing what amounts to a "...
1
vote
3answers
36 views

Sharepoint online item level permissions

I have a document library in which I have a folder called sharepoint and with in that folder it has some important data. Now I want to access the above folder and it content only to a specific group. ...
0
votes
0answers
29 views

CSS was ignored due to mime type mismatch

I am working on client side web part using JavaScript and CSS for customization. I have added custom css and JS into the page and I am getting the message on console of the browser i.e. CSS was ...
0
votes
0answers
11 views

How to securize redirection with Azure AD in a WebPart?

I have developed a Sharepoint Webpart. The aim of this component is simple, authenticate the user in an external website that is embedded inside de Sharepoint. The external website uses Azure AD to ...
1
vote
1answer
29 views

Principle of least privilege on Office 365 OneDrive for Business

Does anyone know how to implement the principle of least privilege on OneDrive for Business on an Office 365 tenant? I would like to have a way for an automated process to be able to only upload to a ...
1
vote
1answer
37 views

Set default or Global Site Collection permissions in SharePoint Online

In SharePoint Server on-prem, we had WebApplication-level permission policies that could allow the administrator to setup certain users or groups to have a set of permissions on All site collections ...
0
votes
1answer
28 views

Site Permissions Flyout Menu

I'm curious why site permissions load on some sites and not others. This particular one doesn't show anybody but on another site, it shows Owners, Members and Visitor group memberships
0
votes
0answers
10 views

About Cross Site Request Forgery prevention on SharePoint 2016

We are using SP2016 on-premise. The Web Page Security Validation is turned on as default with Security validation expires = 30 minute. The SharePoint is installed on MyCompany.com intranet with NTLM ...
0
votes
1answer
94 views

SharePoint Online Site inherit security group from hubsite

Is there a PowerShell script/cmdlet (pnp/spo) to inherit securitysettings from hubsite? All sites linked to hubsite https://tenant.sharepoint.com/sites/marketing should have the same permission ...
0
votes
1answer
39 views

How to remove RoleAssignments from SPListItem/SPFolder correctly in SharePoint

In the library, I have ParentFolder which contains SubFolder. I have broken role inheritance in both ParentFolder and SubFolder (via a web interface). But when I remove role assignment for the user ...
0
votes
1answer
84 views

Custom web part unable to call custom web API

I'm unable to get my custom web part to connect to my custom Web API. Ultimately, my goal is to secure the API using Azure AD and then call that API from my web part. In the local workbench, I'm ...
1
vote
0answers
41 views

Why http PUT can upload file successfully to SharePoint?

We are using SP2016 on-premise. In order to handle security test I prepared a PowerShell script to test upload with PUT/POST. $Digest = $response.getcontextwebinformation.FormDigestValue $headers = ...
0
votes
0answers
230 views

FormDigest control problems after September 10, 2019 Security Update

I've noticed some weird behaviour of Microsoft.SharePoint.WebControls.FormDigest control after last security update. Control is added to every page by setting following code in masterpage: <asp:...
0
votes
0answers
12 views

Migrate SharePoint Column Encryption / Decryption using RSA Machine-Level Crypto

I'm actively trying to find the best way to migrate machine-level encryption to a new server that will be running SharePoint 2019. We use the RSACryptoService.cs to encrypt data being stored in a ...
0
votes
1answer
28 views

SharePoint 2016 Online Information List out of sync

Help! I'm adding users to SP Security Groups but they aren't updating on the Information List so users keep getting the Request Access page when then click on a link. First and most important how ...
2
votes
1answer
133 views

What exactly “manage trust” in CA is doing? (on-premise)

I have experience on setting up SP2010, 2013 and 2016. In order to install SSL cert and to support https to browse SharePoint, beside install the cert in IIS, usually we need to import the certificate ...
0
votes
2answers
46 views

Sharepoint 2013 limited access

quick question - we have a bunch of libraries from A to Z with broken permissions and dedicated SP groups to them only. The only issue we've got is with one particular library - all the other groups ...
2
votes
2answers
44 views

When opening a file, a warning 'insecure or coming from untrusted source' appears

I inherited SharePoint without knowing anything about it and it crashed hard a few weeks ago but we were able to restore most functionality and this is the only thing that is left. When I open any ...
1
vote
0answers
95 views

Excessive Vulnerability Count in Yeoman SharePoint Generator

When I run yo @microsoft/sharepoint and pick standard options for a SharePoint Online WebPart with No JavaScript framework, NPM shows 1956 vulnerabilities with 140 of them being high priority. I ...
0
votes
1answer
32 views

Allow files to be shared, with a label

Label within AIP/ARM can be used to restrict sharing with external users. But is there a way to do the opposite? So I would like to allow users to share specific files when a certain label is added. ...
0
votes
1answer
12 views

setting up and limiting access to specific fields in a record

We have 3 different groups of people who are adding data to a table or group of tables. We need to restrict viewing of the data at the field level for 2 groups of people. We also have a need to ...
0
votes
1answer
54 views

Sharepoint Online: How to display internal corporate websites, without HTTPS?

We have several internal web applications that do not require the HTTPS protocol, as they are purely accessible internally within our intranet. Obviously with Sharepoint Online, our websites will not ...
0
votes
0answers
133 views

Can I disable “Allow double escaping” on a SharePoint web site?

We're working on hardening our SharePoint server, and STIG V-76825 IISW-SI-000229 mandates that "Double encoded URL requests must be prohibited by any IIS 8.5 website". Basically, editing the Request ...
0
votes
1answer
87 views

html or javascript code injection in sharepoint

How safe is SharePoint with Code injection (HTML,Javsscript, SQL) because for example the Announcements list allows to enter embed Code in the TextBox. Can this be a threat or SharePoint is already ...
0
votes
1answer
44 views

Is there anyway to restrict FOLDER access by IP address?

We want to publish some Data for our team, this Data is restricted to only team members, but, we want them to access it only by 1 IP without restricting access to other folders.
0
votes
1answer
43 views

Creating a secure .Net WebAPI for Sharepoint

I have created a Custom Web API using .net C# that will be called in my sharepoint online and i was wondering if is there is anything i could use from sharepoint and use it in my WebApi to verify that ...
0
votes
1answer
402 views

Can I use elevated permissions using JSOM, CSOM, or REST?

I am working with an On-Premise SharePoint 2016 farm and I am looking for some way to elevate permissions, so I don't use the logged-in user's credentials but another set of permissions that the ...
1
vote
1answer
33 views

Hide parts of a Sharepoint Online Site

I have created a very basic SP site in SP Online. I am using modern pages. Basically I have some promoted links (using third party app) that users can click and open up different apps, links, etc. I ...
0
votes
1answer
24 views

User profiles not available in security

I have a SharePoint 2016 on-prem server farm that I manage. It is set up to sync users from Active Directory and everything appears to be working fine. Since there are multiple OUs containing ...
1
vote
1answer
155 views

Is it possible to upload the same file, to multiple document libraries?

Is it possible to quickly upload the same file to multiple document libraries? The reason I want to do this is because I have multiple document libraries because they each have different security ...
0
votes
1answer
43 views

Error in removing SharePoint Solution

I am trying to remove the user solution. I used site.Solutions.Remove(Solution) But I am getting error The security validation for this page is invalid. Click Back in your Web browser, ...
1
vote
0answers
23 views

Where / How is security information passed to SharePoint?

If I execute a query in SharePoint, my security information is passed along with the query. I'm using Developer Tools in I.E.(F12) and am trying to see where this information is passed. Can anyone ...
2
votes
1answer
266 views

Missing 'Strict-Transport-Security' header in sharepoint web application

we have SharePoint site deployed on the internet and when we scan some security settings we found below issue Missing 'Strict-Transport-Security' header Scanner discovered that the affected ...
1
vote
2answers
62 views

SharePoint and OpenPGP file encryption

If I have SharePoint on an azure cloud which can be accessed from any computer using a browser, is it possible to integrate client side PGP encryption so when files are uploaded, they are encrypted ...
3
votes
0answers
265 views

How to get the Data of PWA Settings Security entities? (Using CSOM or REST API)?

I want to get the Groups and Users from PWA settings-> Security tab using CSOM or REST API? How do i get it?
0
votes
1answer
2k views

O365 Security Groups don't appear to be working with SharePoint Online

Today in an effort to clean up our SharePoint permissions and centrally manage things a little more efficiently, we compared our Active Directory groups (OUs) to our groups in SharePoint. I created ...
1
vote
2answers
61 views

SP 2010 Office Web Apps question

I had a quick question. We are in the process of remediation vulnerabilities in our existing SP 2010 environment (Both Windows and SP) There are two updates below that we need to install for SP 2010 ...
2
votes
0answers
219 views

How to prevent Cross Site Scripting attack in sharepoint search

In SharePoint 2013 how to prevent cross-site scripting attack, I deployed a publishing portal to the internet users and its enabled Anonymous access and web application enabled claims mode ...
0
votes
1answer
163 views

SharePoint Web-services disabling automatically causing site down

SharePoint search host controller and SharePoint Server Search 15 disabling every time I enable it. Reason I found that recently I have changed service account password which is used for those two ...
1
vote
0answers
143 views

IRM group access, all users who currently have access on SharePoint

I have found an article whilst looking into applying IRM to SharePoint libraries here: https://docs.microsoft.com/en-us/azure/information-protection/office-apps-services-support Within the article, ...
3
votes
1answer
163 views

Make SharePoint list partly confidential

There is monthly confidential data I want to collect from my firm's subsidiaries through a SharePoint list, directly connected to my workfiles (Excel, Power Bi and related PPT). The existing ...
0
votes
1answer
36 views

Sharepoint security trimming and OneDrive for business

If I have library with 2 folders, and John Smith have access to only one folder - would both be visible for him, if he connects this lib with OneDrive for Business? Does security trimming work in ...
1
vote
0answers
73 views

SharePoint Windows logging - account was successfully logged on 4624 - why so frequent?

My company has a centralized logging platform for all servers. We recently noticed that the bulk of our events come from SharePoint servers for successful logon events. If I look at "Event Viewer" -> "...
0
votes
1answer
843 views

Why are SharePoint security updates failing through Windows update repeatedly, then succeeding?

We have several single-server SharePoint 2013 farms running on Windows 2008 R2. When we do monthly patching through Windows Update, non-SharePoint patches install successfully. However, all SharePoint ...
0
votes
1answer
362 views

SP2010 “NT AUTHORITY\Authenticated Users” group versus the SP2013 “Everyone” group?

In my test SharePoint 2010 instance, I notice SharePoint has a special group called NT AUTHORITY\Authenticated Users In my SharePoint 2013 instance, I notice I have a special group called Everyone ...
2
votes
0answers
154 views

SharePoint Online Access Requests for Users not in Directory

We have a requirement for users not in our O365 tenant to be able to submit an access request to our SharePoint Online site. Normally, if a user in a tenant doesn’t have access to a site, they will ...

1
2 3 4 5
12