.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

Security Best Practices for Developers in SharePoint 2010

Posted By:      Posted Date: April 10, 2011    Points: 0   Category :SharePoint
Explore a list of security best-practice recommendations for developing in SharePoint 2010.

View Complete Post

More Related Resource Links

SharePoint 2010: Security Resource Center (Developers)

Are you new to SharePoint security, or do you want to learn the latest about claims-based identity? Find information about areas of security, including authentication, role providers, and claims.

What Developers Need to Know About SharePoint 2010

Visual Studio 2010 integrates with SharePoint much more closely than in previous versions. Visual Studio 2010 includes SharePoint-specific project types and project item types, and includes powerful packaging, deployment, and debugging features that help increase your efficiency as a SharePoint 2010 developer.

Learn SharePoint 2010 Best Practices

Explore design considerations as you start creating SharePoint solutions that target SharePoint 2010. Find additional videos, labs, and code about testing, deployment, and security in this new training course on Channel 9.?

SharePoint 2010: Developer Best Practices Resource Center

Are you looking for official best practices guidance? Learn tips, including information about speeding up your code, disposing objects, and working with large lists.

SharePoint 2010: Upgrade Resource Center (Developers)

Are you ready to move to SharePoint 2010? Learn about upgrading customizations and reusing your code.

SharePoint 2010: What's New for Developers Resource Center

Are you an experienced SharePoint Developer? Get a list of new features, content, training, and code samples for SharePoint 2010.

A Brief Introduction to Enterprise Metadata Management for SharePoint Server 2010 Developers

Learn about some basic developer tasks that you can use as basic building blocks for more powerful and complex metadata solutions.

Video: Introduction to Claims-based Security in SharePoint 2010

Learn how claims-based identity provides a common way for applications to acquire identity information from users inside their organization, in other organizations, and on the Internet. (Length: 23:46)

Video: SharePoint 2010 for Developers

This video provides an overview of the SharePoint platform for developers. (Length: 1:50)

What's New for Developers in SharePoint Foundation 2010

Find a brief description of the important new features in SharePoint Foundation as well as areas where existing features have been improved and enhanced. Each topic includes links to areas in the SDK where the subject is discussed in more depth.

What's New for Developers in SharePoint Server 2010

Find topics that summarize key additions and improvements in each feature area of SharePoint Server 2010 and point to topics in the SDK that discuss them in more detail.

SharePoint 2010 Benefits for Developers

Software developers can use the SharePoint 2010 developer platform to build business collaboration applications for the enterprise and the Web, all with familiar tools and a rich set of interoperable, out-of-box features.

Learning Snack for Developers: Developing Solutions with Microsoft SharePoint 2010

Five videos on SharePoint 2010 development made easy, creating a SharePoint 2010 solution, deploying a solution, Silverlight applications and the client object model, LINQ to SharePoint, and more.

Speaking at Connecticut .NET Developers Group: ASP.NET MVC 2: Best Practices, September 14, 2010

I will be speaking at the Connecticut .NET Developers Group that will be held at the Microsoft offices in Farmington, CT on September 14, 2010. Here is my topic: ASP.NET MVC 2: Best Practices Level: Intermediate / Advanced Abstract: ASP.NET MVC 2 was released earlier this year as an update to ASP.NET MVC 1 with several improvements. This talk will briefly review what ASP.NET MVC 2 is and then will dive into some best practices for using the tool to build great web applications. We will cover the...(read more)

Passing values from web page to custom security trimmer in SharePoint 2010

Hi, In SharePoint 2007 we had a custom security trimmer that implemented ISecurityTrimmer interface. We also had a custom webpart used for search. Now, using HttpContext we passed values from the webpart to security trimmer with additional info needed to trim the results. It worked since trimmer was executed in the same w3wp process as webpart. Now in SharePoint 2010, the architecture for ISecurityTrimmer2 has changed, as it's executed in search process (other w3wp) - not the webpart w3wp so it has no access to the HttpContext. Question is: how to pass custom data, in form of the string, to a security trimmer when search is done from custom code in webart?

Sharepoint 2010 with role-based asp.net security


I have a Sharepoint 2010 (forms authentication) site on windows server 2008 with asp.net role-based security. At the highest level i have document libraries with folders within each as shown below.

> Doc Lib 1

>> Sub folder 1

>> Sub folder 2

> Doc Lib 2

>> Sub folder 1

>> Sub folder 2

Sub folder 1 and sub folder 2 are the same within each document library.

I want to be able to use asp.net roles to restrict users access to the document library. For example, user 1 should only be able to access sub folder 1 within doc lib 1. I'm not sure how i should go about configuring the roles.

I have created role1 for access to doclib1 and role2 for doclib2. In addition i also have roleA for access to subfolder1 and roleB for access to subfolder2. I have assigned the roles the libraries and folders. To user 1, i have assigned : role1 and role A. I expect that user1 should only see doclib1 and within it subfolder1. But that isn't the case.

How do i achieve my desired results?

SharePoint 201 VS 2010 WF: PersistenceException: The security validation for this page is invalid


Setup: Visual studio 2010 SharePoint 2010 Workflow with custom infopath task edit form, with file attachment control. If I attach a file to the infopath task edit form, I got the following error message, though the attachment is saved, but the next task is not created and the current task is not marked as completed either.

09/27/2010 15:34:31.18     w3wp.exe (0x2B88)                           0x2844    SharePoint Foundation             Workflow Infrastructure           88xr    Unexpected    WinWF Internal Error, terminating workflow Id# 04621f32-17d4-439a-883a-7566b96481bb     
09/27/2010 15:34:31.18     w3wp.exe (0x2B88)                           0x2844    SharePoint Foundation             Workflow Infrastructure           98d4    Unexpected    System.Workflow.Runtime.Hosting.Pers

ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend