Questions tagged [security]

Security is the protection of information and property from theft.

141 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
0answers
369 views

How to set HTML field security using CSOM

Is there a way to set the HTML field security using CSOM? I already found a way to use PowerShell Scripts but i wondering if there is also a way to use CSOM. PowerShell: $web.ScriptSafeDomains.Add("...
6
votes
2answers
3k views

Error : Group cannot be found

I deleted Team Site Owners group from the top level team site in SharePoint Online and found that the people and groups link from the settings page is not working, throwing an error: Group cannot ...
6
votes
3answers
9k views

Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given

Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying: This action couldn't be performed because Office doesn't recognize the ...
4
votes
2answers
207 views

Item Level Security Question

Good Afternoon, Seeking advice for setting security on a custom SP2013 list. All users need to be able to create a new item in the list. Users should not see items created by others. So far, I set ...
4
votes
2answers
216 views

SharePoint 2013 - Unique permissions for claims

This is about SharePoint 2013 On-Premise environment. We've a scenario in which certain content is authored in source site collection and published to a target site collection via cross-site ...
3
votes
0answers
308 views

How to get the Data of PWA Settings Security entities? (Using CSOM or REST API)?

I want to get the Groups and Users from PWA settings-> Security tab using CSOM or REST API? How do i get it?
3
votes
0answers
18 views

Site Classifications and Better Security Control/Alerts

We are looking into using Site Classifications for our SharePoint environments. Classifications are great in that you can apply a global image/stamp/badge @ the top title section of the site and also ...
3
votes
3answers
2k views

SharePoint 2010 - disable SSLv3 and TLS 1.0

I'm tasked to figure out how to disable SSLv3 and TLS 1.0 on SharePoint 2010 farm. After some reading, I came to the following conclusions: It is safe to disable SSLv3 on SharePoint servers, It is ...
3
votes
2answers
4k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
3
votes
0answers
640 views

Getting item level security on SharePoint online through standard web services

SharePoint 2010 and 2007 have a known limitation where you can't access item level security metadata (for example permissions assigned at folders and list items) using the standard web services (...
3
votes
1answer
423 views

RunWithElevatedPrivileges doesn't work in Webpart Constructor

With Sharepoint 2007 I am using RunWithElevatedPrivileges to write to the Event Log, but if I place the call inside the Webpart constructor, I get a "Request Failed" message. However, if I put this ...
2
votes
0answers
233 views

How to prevent Cross Site Scripting attack in sharepoint search

In SharePoint 2013 how to prevent cross-site scripting attack, I deployed a publishing portal to the internet users and its enabled Anonymous access and web application enabled claims mode ...
2
votes
0answers
156 views

SharePoint Online Access Requests for Users not in Directory

We have a requirement for users not in our O365 tenant to be able to submit an access request to our SharePoint Online site. Normally, if a user in a tenant doesn’t have access to a site, they will ...
2
votes
0answers
1k views

SharePoint 2013 Save and reload list item form — save conflict error

I have a SharePoint list form (edit form) that when saved reloads the same edit form. To do this, I overwrote the onclick event on the Save button to construct the URL to redirect to once the form has ...
2
votes
0answers
634 views

SharePoint 2013 - Break inheritance subsite

i want to break the inheritance of a subsite. I know which button I have to press to solve this problem. But if I press this Button in the Ribbon UI in SharePoint, I cann not break the inheritance of ...
2
votes
1answer
34 views

Changing Permissions to a List Item Changes Permissions to the Entire List

I have a custom list in SP2010 where I need each item to be available only to the person who created it. A workflow like the one described in this article helped get that working. After an item is ...
2
votes
0answers
96 views

SQL usermapping for Farm-account: dbo vs itself

On my SharePoint farm (in SQL) the farm-account is sometimes mapped as user (itself) to a SharePoint database and sometimes the farm-account is mapped as dbo to a database. On all databases the farm-...
2
votes
3answers
283 views

Disable SPGroup in SharePoint 2013

I know we can create SPGroup and also delete it. But is it possible to disable it? I want this, because, I want to re-enable it later. I don't want to delete and re-create it, because, there could be ...
2
votes
0answers
96 views

Sharepoint Active Directory Users/Groups

I'm currently testing some things in SharePoint (Trial/Developer mode). Current setup: SharePoint 2013 Server Domain Controller with 2008 R2 (Active Directory). I've configured the SharePoint option ...
2
votes
1answer
969 views

Get Sharepoint Permissions\Roles (custom) of a user from AD Group that is part of SP Group via CSOM

SharePoint 2013 + provider-hosted app. User is part of AD group. AD group is part of Sharepoint group. Sharepoint group has custom security permissions assigned. How do I check whether user has some ...
2
votes
0answers
527 views

SharePoint Search BDC / BCS Model with Item Level Security Using SharePoint Groups

I have a BDC / BCS model that I use for indexing content with SharePoint Search. In the model, I assign item-level security using the method described on this MSDN article: http://msdn.microsoft.com/...
2
votes
0answers
49 views

Audit Logon, failed loging and Logout attempts

I am using active directory for authentication and was wondering if there is any way to Audit Logon, failed loging and Logout attempts I am using SharePoint 2013
2
votes
0answers
133 views

Draft item security Any user who can read items but not anonymous

I have a list which has the following settings: Content Approval: Enabled Versioning: Enabled (Major and Minor) Draft Item Security: Any user who can read items This list resides in an anonymous ...
2
votes
0answers
5k views

IE warning - Microsoft Office Contact Retriever

When I open a SP 2010 page with IE 10 on Windows 8, I get this warning: Internet Explorer Security A website wants to open web content using this program on your computer: Name: ...
2
votes
0answers
139 views

SP 2010: Detect authentication mode

SharePoint 2010 with Claims-based Windows authentication returns 'Forms' from the Authentication.asmx Mode() call. Is this right? Asking this because actually this SharePoint will require Windows auth ...
2
votes
1answer
452 views

Uploading files using object model

I'm experiencing some problems adding documents to a library using the object model. I use the spfolder.files.add where I pass a filestream containing the document in. When I run my Internet Explorer ...
2
votes
0answers
316 views

Editing navigation from site Actions results in error in MOSS 2007

When I or any other user on any machine tries to change the navigation through Site Actions - Modify Navigation, an error occurs stating "The security validation for this page is invalid. Click ...
1
vote
1answer
40 views

Principle of least privilege on Office 365 OneDrive for Business

Does anyone know how to implement the principle of least privilege on OneDrive for Business on an Office 365 tenant? I would like to have a way for an automated process to be able to only upload to a ...
1
vote
1answer
52 views

Set default or Global Site Collection permissions in SharePoint Online

In SharePoint Server on-prem, we had WebApplication-level permission policies that could allow the administrator to setup certain users or groups to have a set of permissions on All site collections ...
1
vote
0answers
90 views

Why http PUT can upload file successfully to SharePoint?

We are using SP2016 on-premise. In order to handle security test I prepared a PowerShell script to test upload with PUT/POST. $Digest = $response.getcontextwebinformation.FormDigestValue $headers = ...
1
vote
0answers
109 views

Excessive Vulnerability Count in Yeoman SharePoint Generator

When I run yo @microsoft/sharepoint and pick standard options for a SharePoint Online WebPart with No JavaScript framework, NPM shows 1956 vulnerabilities with 140 of them being high priority. I ...
1
vote
0answers
23 views

Where / How is security information passed to SharePoint?

If I execute a query in SharePoint, my security information is passed along with the query. I'm using Developer Tools in I.E.(F12) and am trying to see where this information is passed. Can anyone ...
1
vote
0answers
150 views

IRM group access, all users who currently have access on SharePoint

I have found an article whilst looking into applying IRM to SharePoint libraries here: https://docs.microsoft.com/en-us/azure/information-protection/office-apps-services-support Within the article, ...
1
vote
0answers
82 views

SharePoint Windows logging - account was successfully logged on 4624 - why so frequent?

My company has a centralized logging platform for all servers. We recently noticed that the bulk of our events come from SharePoint servers for successful logon events. If I look at "Event Viewer" -> "...
1
vote
0answers
31 views

Intended Audience Header/Banner and Security Control

We are currently in SharePoint 2013 on-prem and soon to be in 2016 on-prem (we are not going to SharePoint online yet). Our goal is to provide a clear statement/header/banner of who should have ...
1
vote
0answers
19 views

Is there any security concerns to enable http options?

My recent vulnerability assessment report flagged the HTTP OPTIONS is enable as unsecure practice. However, developer told me that it is necessary to enable so that end user may use the MS Explorer ...
1
vote
0answers
165 views

Why are SP security updates showing as Missing/Required?

Let me preface by saying, I already ran the Get-SPProduct -local but I think it's because the security updates are not there. I have a couple questions regarding security updates and patching as this ...
1
vote
0answers
61 views

SharePoint PWA 2013 - Visitor Access Issue

so I am working with SharePoint 2013 Project Web App security and it's giving unexpected access issues. So in PWA security Manage Group settings, I added a new user to the Portfolio Viewers group, ...
1
vote
1answer
2k views

Encrypt sharepoint online list columns

I'm somewhat proficient in development but have basic knowledge about SharePoint and Sharepoint Online. I would like to add an encryption thing to my Sharepoint Online list columns make it possible ...
1
vote
0answers
47 views

FxCop Code analysis error for Provider Hosted App

I am running FxCop tool on my provider hosted app. But it is giving an error in web.config file like CA3116 DenyUnauthorizedUsers You are explicitly allowing all authenticated users for whom no ...
1
vote
0answers
285 views

Sharepoint 2016 shows wrong username. How i can investigate further?

We have a SharePoint 2016 Farm with Kerberos Authentication behind an Apache Reverse Proxy. This worked fine the last months. Now, when my colleague or I open SharePoint in the Internet Explorer the ...
1
vote
0answers
53 views

SharePoint uses kerberos authentication communicate to AD and impact for changing password krbtgt Account

Hi Is SharePoint uses kerberos authentication communicate to AD,SQL Server or any other Microsoft products by default ? for product to product communication Microsoft using kerberos authentication by ...
1
vote
1answer
309 views

Permissions to AD group does not work until refresh

I have an AD group "superusers" which has direct access to some list items in a list. Using Check Permissions show that even though the AD group is listed with access to the list item, it does not ...
1
vote
0answers
56 views

How will we implement the security in the SharePoint hosted app which deployed on SharePoint online?

In our project, users will allow to upload the document only through the app and will have also provided links in apps to directly download the file e.g : https://zzzz.sharepoint.com/sites/zzz/...
1
vote
2answers
450 views

Security report

I am looking for a tool able to perform a cumulative report of SharePoint rights, AD groups and IRM rights, at document level in a given library.
1
vote
0answers
21 views

When adding any app there is a firewall on the page, how can I remove it or disable it?

I'm new with SharePoint 2013. after install all Apps from the store I faced an issue. there is a firewall popped on the page for app when i open the page. for example: after the insert the apps " let’...
1
vote
0answers
139 views

WCF Authorization via SharePoint Security Model

Would like to implement authentication and authorization operations on non-SharePoint hosted cross-domain WCF service via SharePoint 2010 Security Model, which is Windows Authentication. So, a member ...
1
vote
0answers
48 views

How to list up sites you have permission to

We have a SharePoint 2013 on-prem environment. We are using both sites and site collections as project rooms. On the front page of our intranet I need to list up all sites and site collections which a ...
1
vote
0answers
42 views

How can I have end-users visualizing different dimensions from the same Powerpivot on same excel file?

I need help to understand if it is possible to have end-users visualizing different dimensions from the same excel file published in Sharepoint 2013. I have a data warehouse in SQL Server 2012 and I ...
1
vote
0answers
354 views

How to redirect a user to a sharepoint online site when using custom login

I would like to have a custom login to my SharePoint Online. I can authenticate successfully by doing the below : var targetSite = new Uri("https://<site_url>"); var login = "<user@tenant&...