.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

SharePoint Security: Trim SharePoint Search Results for Better Security

Posted By:      Posted Date: August 21, 2010    Points: 0   Category :ASP.Net

SharePoint search may return too much information, causing data security problems. Learn how to use the custom security trimmer to ensure users see only the documents they have permission to view.

Ashley Elenjickal, Pooja Harjani

MSDN Magazine July 2010

View Complete Post

More Related Resource Links

Security trimming in SharePoint Search?


I have question related to search. let say there is a user who does'nt have the permission on particular document library but when user do a search, the documents should come on to the search result page from that document library  but when user try to open it from the search result page, user shouldnt or message should pop up saying user doesnt have the perminssion on this document?

Is it possible?


SharePoint Tutorial - Security

Security in SharePoint is comprised of users, groups and roles.

Users, Groups and Roles

A user account comes from the authentication system. For example, if Active Directory is used to authenticate then the user accounts will come from it.

There are two types of groups SharePoint uses: domain groups and SharePoint groups.

Office Space: Security Programming in SharePoint 2007


This month Ted Pattison presents an overview of programming security and permissions for Windows SharePoint Services 3.0.

Ted Pattison

MSDN Magazine February 2008

SharePoint 2010: Security Resource Center (Developers)

Are you new to SharePoint security, or do you want to learn the latest about claims-based identity? Find information about areas of security, including authentication, role providers, and claims.

Administrator and Developer Guide to Code Access Security in SharePoint Server 2007

Explore configuration options, get best practices for managing CAS in SharePoint environments, and walk through a complex CAS scenario.

Video: Security and Deployment: Office Applications in SharePoint

Many times deployments are much more than a single Office Add-in. When additional items like Lists, Content Types, Workflows, etc. need to be deployed as well, you need a package that can be deployed by an administrator. This video discusses deploying complete applications to SharePoint. (Length: 9:30)

Video: Introduction to Claims-based Security in SharePoint 2010

Learn how claims-based identity provides a common way for applications to acquire identity information from users inside their organization, in other organizations, and on the Internet. (Length: 23:46)

Using the Acceleration Toolkit for Microsoft Forefront Security for SharePoint

Learn how to supply full-fidelity FSSP enablement to a SharePoint environment, regardless of deployment phase with this acceleration toolkit.

SharePoint Server 2010 Search - not returning results but crawling without errors

I have created a Search Service Application on a SharePoint Server 2010 (RTM) Farm and used the default Content Source. I started a Full Crawl and it suceeded with no errors etc. I ran it a few times and no issues. But if I go to the Intranet Portal Web Appliaction and do a search for a document that would have been crawled it does not show up in search results...nothing does. I am not getting any errors in Event Log or ULS Logs relevant to Search. How can I troubleshoot this problem further?SharePoint Solution Architect, Perth Australia - Microsoft Virtual Technology Specialist - MCTS WSS Dev, WSS Adm, MOSS Dev, MOSS Adm - http://wss.made4the.net/ - Founder of http://www.sharepointdevwiki.com/

Passing values from web page to custom security trimmer in SharePoint 2010

Hi, In SharePoint 2007 we had a custom security trimmer that implemented ISecurityTrimmer interface. We also had a custom webpart used for search. Now, using HttpContext we passed values from the webpart to security trimmer with additional info needed to trim the results. It worked since trimmer was executed in the same w3wp process as webpart. Now in SharePoint 2010, the architecture for ISecurityTrimmer2 has changed, as it's executed in search process (other w3wp) - not the webpart w3wp so it has no access to the HttpContext. Question is: how to pass custom data, in form of the string, to a security trimmer when search is done from custom code in webart?

Sharepoint 2010 Search No Results

I am unsure about who the Search Services should be running under. I am getting no results returned from Sharepoint after doing full successful crawl. I have not installed Fast Search, just going through the Search box on the site. For Services, I have Sharepoint Server Search 14[Server admin account] and Sharepoint Foundation Search V4[Server admin account] both started. The full crawl only takes about 2 minutes. When I changed the account to [local system] for both of these services, it was still going at 1 hour and 40 minutes when I stopped the crawl. I assume that the local system is not the account to run it under? The site only has about 20 documents on it right now.    

Copy sharepoint 2007 folder (with sub folders) with all the security permissions

I am looking to copy a common sharepoint folder(sub folders) in 2007 with all the security permissions intact, to a different location in the same site, Does anyone know how to do this?

really dont understand security on Sharepoint

Security issue using Sharepoint designer. I think this is more administration than Sharepoint designer. Have created a site where designers will update pages,CSS,Master pages. I have put these users in the Designers sharepoint group. I have branded the site initially and now passed this to the designers. The issue I have is the designers cant checkout and ammend master pages or css's even though the description of the group says this.They come up 'ACCESS DENIED' 'Members of this group can edit lists, document libraries, and pages in the site. Designers can create Master Pages and Page Layouts in the Master Page Gallery and can change the behavior and appearance of each site in the site collection by using master pages and CSS files. ' I have also tried to put the users on the site owners group but have 'ACCESS DENIED' and no luck. However if I make them a secondary administrators from site setting it works fine. I need to know the correct planning of roles in Sharepoint and what groups . The designers will ammend pages,page layouts,ammend master pages. Thanks

Copy sharepoint 2007 folder (with sub folders) with all the security permissions

I am looking to copy a common sharepoint folder(sub folders) in 2007 with all the security permissions intact, to a different location in the same site, Does anyone know how to do this?

SharePoint Search Server 2010 Express returns no search results for non-admin users

This is going to sound crazy, but anyway... bare with me... I have a SharePoint Search Server 2010 Express (RTM) installed with a crawl account (call it sharepoint_crawl) which has full read permission to an entire site collection of 100,000 documents. I have logged in with this account to make sure it has read access to everything, and it does. I run a full crawl of all documents and allow it to finish. If I try and search the content for an extremely common term (i.e. 50,000+ hits) I get no results. However, if I log in with a site collection admin I do get search results. There are no indexing errors or query errors in either log files or event log. Everything looks like it is working correctly - just no results for non-admins Anyone tripped on this? I have recreated the crawl account and perform a full re-index with the same results. What gets me is that the crawl account does have read permission to the content it is indexing, the content is indexed correctly, but the crawl account cannot get results back. It is as if security-trimming is removing everything. Any ideas?

Sharepoint Search Service is running but no results

Hi,   I am new in working with Sharepoint. I recently installed the sharepoint foundation 2010 on a windows server 2008 machine. The sharepoint installed properly and the Sites are working fine. But I just cannot make the Sharepoint Search feature (using the search from the search bar). It always returns no results found. The Sharepoint foundation Search service is started. Also I cannot find the "Search Service" link under the Manage Service applications tab. Did I do anything wrong while installing Sharepoint. Also it will be very helpful if someone can point to a resource where the details about the Search Installation process and working is explained. Thanks

Is there a way to obtain where in a sharepoint site a certain security group is used?

There is a sharepoint group that has been set up and is used throughout a single sharepoint occurance with many team sites and lists. It has orginated from AD and sent over to sharepoint with collection. The want to rename the group name. I have used it throughout the site. Is there a way to identify what sites and lists have been secured with this site so I do not have to go manually through site by site? Thanks, Angela
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend