Archive

You are currently browsing the archives for the Security category.

Apr

24

SharePoint – Limited Access – What is it?

By Cory

This has been around for a while but since I still get questions about it from clients I figured I would post an explanation that may be a little more visual that other explanations.

When you start customizing security on your SharePoint sites by breaking inheritance at different levels you may start to see your nice clean permission lists be infiltrated by “Limited Access”. MSDN explains the “Limited Access” permission level as:

Allows access to shared resources in the Web site so users can access an item within the site. Designed to be combined with fine-grained permissions to give users access to a specific list, document library, item, or document, without giving users access to the entire site. Cannot be customized or deleted.

Let’s look at a scenario: Read more »

Feb

2

Setting up Anonymous Access

By Cory

I always seem to leave out a step when configuring anonymous access for a SharePoint site so I’ve finally put together a full guide so I don’t leave out any steps in the future.

Deactivate Hidden Features

If you are getting “Access Denied” for lists and libraries then you probably for got this step. There is a hidden feature that secures the lists and libraries by default for all sites that have anonymous access enabled. If you have already enabled anonymous access prior to deactivating this feature then you will need to turn all anonymous access off and back on to refresh this functionality.

  1. For each site collection that requires anonymous access execute the following stsadm command.
    stsadm -o deactivatefeature -url http://sitecollection -name ViewFormPagesLockDown

Read more »

Aug

27

SharePoint Permission Strings

By Cory

SharePoint uses permission or rights strings in numerous places including setting permissions for Custom Actions in your feature XML. A colleague asked this question recently and I had to lookup the answer so I decided I would post for my own reference.
Read more »

Jun

26

Creating MySites Programmatically

By Cory

Instead of asking every user to click on “My Site” and have the site provisioned for them it’s sometimes nice to already have the site created… or create it as part of the Employee Intake process. This is especially true if the My Site plays a role in a custom application as it did for one of my clients.

Read more »

Jun

12

Denying User Access At The Site Level

By Cory

It’s a pretty well known fact that SharePoint cannot deny access for a user below the Web Application level as shown in the screenshot below. Sadly there will be no code samples for this one as it’s pretty proprietary stuff.

Read more »