Questions tagged [security]

Security is the protection of information and property from theft.

Filter by
Sorted by
Tagged with
24
votes
2answers
6k views

Manage trust/add certificate

I try to add a certificate under "central administration>security>manage trust" but I always get the following error: The Root Certificate that was just selected is invalid. This may be ...
24
votes
5answers
55k views

Why are user permissions set in AD not updated immediately to SharePoint?

I have a SharePoint 2010 Foundation installation on Windows 2008 R2 and SQL Server 2008 and using Claims and Windows authentication. Subsites are visible only to members of a certain group. However, ...
19
votes
4answers
16k views

Best way to Impersonate in SharePoint

So far, I am aware of below 3 ways of performing impersonation in a SharePoint web part or page : Using Win32 API [DllImport("advapi32.dll", SetLastError=true)] public static extern bool LogonUser(...
11
votes
5answers
18k views

Get name of Farm account using Powershell

How can I get the name of the Farm account ? I can see it listed in Get-SPManagedAccount, but do not see any properties on the SPManagedAccount objects to be able to dynamically filter by and ...
10
votes
1answer
5k views

Is the “Keep me signed in” in SharePoint Online a security flaw?

We are considering replacing our on-premise SharePoint intranet with SharePoint Online. I won't spell out the advantages, but I can see one big disadvantage - the "Keep me signed in"-button... Our ...
10
votes
3answers
5k views

Java to Sharepoint interface, with claims based authentication

I have a sharepoint server with a claims-based authentication (ADFS server). I have a Java app that needs to push data to a sharepoint list, preferably over the REST API, and with the additional ...
10
votes
3answers
1k views

FAST Search Security Trimming of non Windows External Content Types

We have integrated a back-end web application into SharePoint 2010 using the BCS and the OOTB Web Services connector. The data in the backend system is protected by ACLs and we need these ACLs to be ...
8
votes
4answers
6k views

Google Analytics for an Intranet Site

I installed the Google Analytics tracking code in an intranet site, it works properly. But my concern is, are there any security risks of using it for an intranet site? simply, is it ok to use Google ...
8
votes
1answer
13k views

“The XSS Auditor refused to execute a script in…” from Chrome when using <script> tag in content editor webpart

Embedding javascript in a content editor web part triggers XSS Auditor error in Chrome when editing any webpart on the page containing the content editor web part. Steps to reproduce 1 - Use newest ...
8
votes
3answers
6k views

Penetration testing tool for SharePoint

Does anybody know any good penetration testing tools for SharePoint?
8
votes
1answer
920 views

How does EU Cookie law affects SharePoint Sites?

The Euorpean Union has forced a new cookie law to protect privacy of a user. The full documentation is at Information Commissioner’s Office guidance According to an extract from the above document, ...
7
votes
5answers
2k views

How to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges

Is there a way to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges? class Foo { public static void Bar() { if (CODE_RUNS_ELEVATED) { Debug.WriteLine("You ...
7
votes
2answers
5k views

ValidateFormDigest - when exactly does it need to be called?

Can someone explain to me exactly when and why I need to call SPUtility.ValidateFormDigest? Contrary to the spec, which says you need to call it before elevating privileges, I've had the following ...
6
votes
5answers
4k views

What is the difference between SPContext.Current.Web and SPContext.Current.Site.OpenWeb()?

My colleague found that some scenarios of working with SPWeb objects depend on how you obtain them. I'm not talking of impersonating with UserTokens - that another story. But at times when you write ...
6
votes
2answers
17k views

jQuery SP.JS objects to test if current SharePoint user has full control / owner rigths?

As an example, the below jQuery displays current SharePoint user title. Excellent! :) Is it possible to use the sp.js objects to test If the current user has Full Control on the current page or ...
6
votes
3answers
9k views

The context has expired and can no longer be used. (Exception from HRESULT: 0x80090317)

I am facing this error all day long and I have not figured it out yet. I have tried: setting the date time zone in the web application to match that of the server set "security validation expires" to ...
6
votes
2answers
6k views

How do I remove all users from an SPGroup object?

I have an SPGroup object populated, how can I remove all members from the group, so that essentially I start with a fresh group. I can't delete and recreate it, so I need a way to work with the ...
6
votes
2answers
19k views

How do I disable “Get a Link” & “Share”

My department is exploring SharePoint as an alternative to fileshares. Typically we create documents, then email links to the document. it seems there are many types of links, which is confusing and ...
6
votes
1answer
1k views

Hiding content from authenticated users?

I have content that I only wish to display to anonymous users. Once the user has logged in, I would like to hide it. Is "Audience Targeting" the right way to do this, and if so, it seems I can only ...
6
votes
3answers
712 views

Possible to security trim what web parts a user can put on a page?

Basically when you select Insert -> Web Part you get this menu: Is it possible to determine what is available here based on a users role?
6
votes
2answers
6k views

Session time out for Windows Authentication

I have a requirement where we need to timeout the SharePoint sessions (security validation). Since I am using Windows Authentication I am not able to use session timeouts (as Windows authentication ...
6
votes
1answer
3k views

What does “Security validation expires” do?

We have mixed authentication on our SharePoint 2013 site collection. I need to have FBA users automatically logged out after 30 minutes of inactivity, but they don't have to necessarily be redirected ...
6
votes
0answers
360 views

How to set HTML field security using CSOM

Is there a way to set the HTML field security using CSOM? I already found a way to use PowerShell Scripts but i wondering if there is also a way to use CSOM. PowerShell: $web.ScriptSafeDomains.Add("...
6
votes
2answers
3k views

Error : Group cannot be found

I deleted Team Site Owners group from the top level team site in SharePoint Online and found that the people and groups link from the settings page is not working, throwing an error: Group cannot ...
6
votes
3answers
8k views

Opening document from Search results - This action couldn't be performed because Office doesn't recognize the command it was given

Hi I am trying to open an Office document by clicking on the search results document title, however an error box pops up saying: This action couldn't be performed because Office doesn't recognize the ...
5
votes
4answers
11k views

Why is SharePoint_Shell_Access permission required to run SharePoint powershell?

So we're setting up a SharePoint farm and it seems our admin accounts require access SharePoint_Shell_Access role on SQL. http://technet.microsoft.com/en-us/library/ee806878.aspx http://technet....
5
votes
1answer
8k views

Unable to evaluate expression because the code is optimized or a native frame is on top of the call stack

Below code throw an exception at "Item.Update();" private void AddEmail() { site = SPContext.Current.Site; web = site.RootWeb; SPSecurity.RunWithElevatedPrivileges(...
5
votes
1answer
6k views

How to enable access to subsite only to certain users or groups?

I created an intranet site based on Sharepoint Foundation 2010 which is based on mixed authentication (Windows and Form Based). It has a main site where all logged users have access and there are ...
5
votes
1answer
6k views

What permissions do I need for a user to see all entries in a list where typical users can see only their own submissions?

I have a list where users can create and see their own items, but not other users' items. I, being the site owner, can see all items. How can I give specific users within a Sharepoint Group the ...
5
votes
1answer
417 views

Why can I only login if I use “Sign in as a different user”?

Currently, I can only login directly (in any browser) with members of the Sharepoint Farm Administrators group. However, if I login as one of those administrators then login as a regular domain user I ...
5
votes
3answers
8k views

How to get a web.config file in a sharepoint 2010 publishing site?

I am working on a sharepoint 2010 project and I noticed in the soultion their is no web.config. I asked one of my fellow co-workers and he mentioned something about we don't have access to to it as ...
5
votes
1answer
4k views

Change SharePoint group owner with Powershell to a SharePoint group

I have this PS script to change the group owner of a SharePoint group to a domain user. I would like to use this script to change it to an existing SharePoint group. The current script only allows ...
5
votes
1answer
1k views

What has changed that the security scope limit for SharePoint 2010 is no longer 1000?

What appear to be outdated blog posts everywhere tell you to not exceed 1,000 security scopes per list. Some even provide hard evidence as to why this is a bad idea. What they seem to have in common, ...
5
votes
5answers
7k views

User Accounts Disappearing From SP Groups

We've been running into a bizarre scenario and I'm at a complete loss. I'm a site collection admin for my division's portal. We're on a shared internal company-wide MOSS server, and I have no access ...
5
votes
2answers
3k views

Make a folder in a document library read only without using security

I have a document library with about 25,000 folders in it, each folder represents a task in our task system and is used as a document repository for those tasks. Of the 25,000 tasks about 22,000 are ...
5
votes
1answer
5k views

more than one attachment field

We are planning to retire one of our old fashion tools and currently evaluating Sharepoint 2010. in our current tool, we have 3 different attachment sections two of which are visible to customer, and ...
5
votes
2answers
410 views

Unique Permission Issue

This appears to be by design. I have a user who used unique permissions on a subsite and then used unique permissions on a list in the subsite. They then decided to have the subsite inherit ...
4
votes
3answers
4k views

What are the best practices for using SharePoint Groups with AD Security Groups

Does anyone here have a best practices when applying security policy to SharePoint groups? Do you use security enabled Distribution Lists in your SharePoint groups? Do you say to heck with that and ...
4
votes
2answers
2k views

Best authentication method for accessing sharepoint web from the Internet

We're planning a sharepoint intranet which will be acceded directly from our LAN, however it should be accesible from the Internet, too. What would be the best authentication method available for this ...
4
votes
3answers
3k views

How do you allow Content Authors to add Javascript to a Publishing Page?

We have an internet-facing, SharePoint 2010, Publishing Site. The content authors that maintain the site are JavaScript savvy web designers. They would like to be able to add JavaScript to publishing ...
4
votes
2answers
1k views

Are “Security only” crawls kicked off automatically?

I know that if a user is added to a SharePoint group, a crawl needs to run before the ACLs are updated to reflect the new user's permissions. The question that my team is debating is whether or not ...
4
votes
2answers
2k views

SharePoint Security issue in _layouts/user.aspx

Considering the following scenario : create a SharePoint Site Collection create a new Security Permission Level "Test", with "Manage permissions" checked. create a new Group, with "Contribute", and "...
4
votes
1answer
3k views

Anonymous access = huge web services security hole?

My company uses SharePoint for their public website by allowing anonymous access. Some of our lists and document libraries have permissions to only allow certain users to be able to access them. I'm ...
4
votes
1answer
80 views

Sharing folders on SharePoint and variance between “Shared with” and “Advanced”

Is there a reason that when I click on a folder in SharePoint that I can see a list of people that the folder is shared with that differs from the list I see when I click on Advanced? For example, I ...
4
votes
1answer
171 views

Cannot Login to SP Site from application Server - Login prompt continually

After Creating new Site Collection root(SPWEB) with Host Header every request made from server (internal) is denied (Popup login Window continually). If requests come from FE (same USER), access is ...
4
votes
1answer
3k views

How to Set Forms Authentication Timeout?

I have a public facing SP2010 site that uses forms authentication (default ASP.NET membership provider). I noticed that The user stays logged in even after hours of inactivity. We need the user to be ...
4
votes
1answer
168 views

SharePoint permissions reading from AD

I have a SharePoint sub web with unique permissions, within the site I have 3 SharePoint groups (Owner, Contributor and Viewers), in each of these groups I am including an Active Directory group. ...
4
votes
1answer
535 views

How to save the list item with document for anonymous user?

we have internet portal and anonymous users can view and visit the site and we have one page that anonymous user can fill the form and upload small size of documents less than 500 KB and it will save ...
4
votes
3answers
14k views

How to repair “The server farm account should not be used for other services. ”

I'm looking for a solution to this in my 2013 farm. TITLE The server farm account should not be used for other services. EXPLAINATION spadmin, the account used for the SharePoint timer service and ...
4
votes
1answer
714 views

SPSecurity.CatchAccessDeniedException = false: Does Sharepoint keep this setting?

When I add SPSecurity.CatchAccessDeniedException = false; this disables the redirection to a login site. Does Sharepoint keep that setting until I set it to "true" or just as long until the object is ...

1
2 3 4 5
12