37

I figured it out: it does not work in Mozilla Firefox and Google Chrome. By using the internet-explorer (for entering the central administration and adding the certificate) everything work fine!


17

You can use Sharepoint Client Object Model for this. Here is how to do it on the current web: function CheckPermissionOnWeb() { context = new SP.ClientContext.get_current(); web = context.get_web(); this._currentUser = web.get_currentUser(); context.load(this._currentUser); context.load(web,'EffectiveBasePermissions'); context....


16

I see two differences one difference: The function SPContext.Current.Site.OpenWeb() creates a new instance of the SPWeb object, and you are responsible to dispose it. However, SPContext.Current.Web gives you access to the current instance of SPWeb, and you must not dispose it. The function SPContext.Current.Site.OpenWeb() (without sending parameters) opens ...


8

Resetting the environment with an iisreset did the job.


7

Hope this will help someone because I faced the same issue. The claims based token is refreshed every 10 hours and hence if you make any changes to Active directory group memberships it won't reflect immediately in the token. you need to run the following powershell command to adjust the token life time to a smaller value. $sts = Get-...


7

Another option would be to embed JavaScript code via Content Link property. Steps: 1) Create the following regular text file <script type="text/javascript"> <!-- JS code goes here --> </script> and upload it into Site Assets library 2) Add a reference to a file via via Content Link web part property


6

Elevated privileges is not enough to write to the configuration database. With elevated privileges you will use the the web application app pool’s identitty, which has only read permission to the config db by default. Of course admin user (which runs the central admin should have read and write permissions). See more at: http://joelblogs.co.uk/2010/...


5

EDIT Just like to clear this answer! I've read your question and the answer has to do with the security context that has been put in place for a reason. When using the SPContext.Current.Web or any context appart from .OpenWeb() it is already using the current users security context(read, write,full permissions). Open web is creating a new SPWeb object ...


5

The right way to grant access is to use the SPWebApplication.GrantAccessToProcessIdentity method. It sets up the database permissions for you, but remember to run it again if you add content databases. You can do this with the following PowerShell: $webApp = Get-SPWebApplication TEAM_SITE_URL $webApp.GrantAccessToProcessIdentity("domain\username of MY SITE ...


5

A crawl is never started by anything changing in SharePoint, neither content nor security changes. A crawl is either started manually or according to the specified schedule. If you're using search, then you probably have a crawl schedule set up which does incremental (and sometimes full) crawls. The full crawls with crawl everything and the incremental ...


5

You just need a small change to your PowerShell script. $web = Get-SPWeb http://webUrl $groupOwner = $web.SiteGroups["GroupA"] #this group will own "GroupB" $groupTarget = $web.SiteGroups["GroupB"] $groupTarget.Owner = $groupOwner $groupTarget.Update() For all groups in a web: $web = Get-SPWeb http://webUrl $groupName = "SharePoint Group Name" #this will ...


5

You'll miss out of the Share part of SharePoint, but sharing can be disabled. On the site collection you want to restrict: Click on the gear and select "Site Settings" Click on "Site Permissions" under "User and Permissions" In the ribbon, click "Access Request Settings" Uncheck "Allow members to share the site and individual files and folders." Uncheck "...


5

I would look at possibly a workflow that she initiated before she left that had a next step that was triggered in July. I think I have seen this behavior in approval workflows before.


5

Sorry, but there is no way to run at elevated privileges from the client-side, and if there was a way, it would be roughly 0% secure. Depending on what you're trying to achieve, there are some ways that you might be able to work around it. For instance, if you can do it from a workflow, SharePoint 2010 workflows can do an impersonation step which runs as ...


4

Do the following powershell command: $sts = Get-SPSecurityTokenServiceConfig $sts.FormsTokenLifeTime = (New-TimeSpan -minutes 30) $sts.Update() Get-SPSecurityTokenServiceConfig


4

Searching on the 0x80070005 error indicated it is due to permissions. Checked the "site collection administrators" for the site in question and the logged in user although having access to Central Admin, wasn't there. Made the logged in user a site collection admin and script was successful.


4

If you need the Group Name, unfortunately there is no direct way to do that. But we can get the current user and get user collection for one group. Then you can check the user collection from one group to see whether it contains the current user. https://stackoverflow.com/questions/6428300/get-current-users-group-using-the-sp-2010-javascript-client-side-...


4

if you are working on SharePoint 2013 Version, then it is easy to get current user groupcollection through rest api in javascript. script would be like this : function getCurrentUserGroupColl(UserID) { $.ajax ({ url: "/sites/dev/_api/web/GetUserById("+UserID+")/Groups", type: "GET", headers: { "Accept": "application/json; odata=verbose","X-...


4

If you need to go above 1000 unique ACL's in your list, you should rethink the way you use SharePoint! Set up unique sites for different groups of users, instead of having thousands of unique permissions on a list. It simply will not perform very well due to the way SharePoint handle this. As mentioned in the boundaries specs for lists, the max number of ...


4

There are two types of app store in SharePoint 2013. The first is a 'public store,' which is the main app store that Microsoft has been marketing heavily. Users connect to it from within SharePoint, and it adheres to the now standard rules of a typical store. The other type of store is the 'corporate store' (referred to as an app catalog by Microsoft). This ...


4

There is a hidden list in your site collection at /_catalogs/users. See this explanation. If the user has yet never been assigned to a group, there is no entry for her / him in the list, that means there is no SharePoint user for the account. If the user is assigned first time to any group, the SharePoint user should be created first. If the user, who ...


4

Microsoft suggests using the default security settings of Internet Explorer for Office 365. But if problems comes with singing in/out, editing documents, etc, then you need to add URLs to both Trusted Sites zone and Local Intranet zone: Add to IE’s Trusted sites zone: https://*.outlook.com/ https://*.sharepoint.com/ https://*.microsoftonline.com/ ...


4

You might be victim of LoopBackCheck. Possible solutions: Bypassing your proxy server for local addresses (Source) Adding a team Web site to the list of trusted intranet sites (Source) SharePoint disable loopback check (DisableLoopbackCheck dword in registry)(Source) For me DisableLoopbackCheck worked.


4

'Shared With' contains permissions inherited from parent sites, SharePoint Groups, and AD Groups that have access. When you click advanced, it will show these groups and individual users that have access but won't show you who is in the group or who has inherited access via a parent site.


4

Yes this can be achieved using creating different views with filters , in your scenario create a People Picker Column to save the value of line managers in each list item. after that create a view with the filters applying line manager = [Me] which will show only the items what are all having line manager value as the Current User . Please refer Applying ...


3

Sorry it's been a while since I have not updated this but We had found out what this was. There were lots of site movements with export / import on this environment and actually although they were there, on the new destinations, in the background all the associated groups were orphaned after site was imported . so after a certain period a timer job was ...


3

DisableLoopbackCheck should be a "DWORD (32-bit) Value"


3

You could re-write these definitions like this $context = SPContext.Current.Web and like this $context = SPContext.Current.Site $myweb = $context.Web(guid/url) My understanding is these are two different contexts: one is the Web's context, the other is the Site Collection's context (which is then referencing one of its webs). SPContext.Current This ...


3

Since it is an intranet, I think worrying this much is a little over the top. I guess with fiddler around, anyone can modify their ajax response to the server, so I guess I'm not really following you about why an update panel is more secure than another implementation (such as icallbackeventhandler)? Are you counting on the postback security validation ...


3

Wrote a blog on this some time back: http://vrdmn.blogspot.in/2012/06/use-html-pages-in-sharepoint-2010-html.html So basically there are two modes for file handling in SharePoint 2010. "Strict" and "Permissive". Strict mode entails that only the trusted filetypes in the web application are opened in the browser. For all the rest of the filetypes ...


Only top voted, non community-wiki answers of a minimum length are eligible