Limited-access user permission lockdown mode and allowing anon users to view list items

I'm working on setting up a public-facing SharePoint website that will need to support anonymous user access. I'm using the Enterprise Publishing Portal site collection template, so the Limited-access user permission lockdown mode feature is turned on.
Everything is working great, except allowing users to view a list item. One of the key features I was hoping to leverage was the ability to display custom lists on a web page using a List View web part. Then they could click on an item and see the DispForm.aspx
so the item's content was accessible, including any file attachments.
A real-world example is adding an RSS viewer web part to the home page and allowing anon users to click on one of the events to see the details of it. Currently, in lockdown mode, the users gets an authentication prompt.
I toyed with the idea of turning the lockdown feature off. However, I'm uncertain of the full impact that would have on security. For example, I know it will allow anonymous users to see who created and modified an item, which we don't want exposed to the
public (i.e. our employee names). Seems like opening a can of worms by disabling the lockdown mode...
Any ideas on how to tackle this would be greatly appreciated.

So far, this is the most promising solution I've come across:
http://soerennielsen.wordpress.com/2012/05/29/how-to-make-list-items-visible-to-anonymous-users-in-search

Similar Messages

Display some constant in the input field and allow the user to change it.

Dear All,
I have a requirement in WDA to display inputfield with some constant initially and allow
the user to change that value according to his wish.Currently I am using UI Element
InputField for this,but I am not able to show the constant initially.
How can I achieve this pls suggest.
Thanks,
Reddy.

Hi sudhir,
To display with default values, you need to write your code in wddointi method.
Check this code..
* navigate from <CONTEXT> to <INPUT> via lead selection
lo_nd_input = wd_context->get_child_node( name = wd_this->wdctx_input ).
* get element via lead selection
lo_el_input = lo_nd_input->get_element( ).
lv_ship_point = '1001'.
* set single attribute
lo_el_input->set_attribute(
name = `SHIP_POINT`
value = lv_ship_point ). // Now ship_point have initial value 1001.
Cheers,
Kris.

To extract the users permission on files and folders in sharepoint 2010 using client object model

To extract the users permission on files and folders in sharepoint 2010 using client object model

Hello,
This is sample code to get item level permisison: (Just written in notepad so it is not tested)
public void ItemLevelPermission()
SecurableObject curObj = null;
ListItem curItem = ctx.Web.Lists.GetByTitle("LibraryName").GetItemById(ItemId); -> Use Id of file or folder.
IEnumerable roles = null;
roles = ctx.LoadQuery(
curObj.RoleAssignments.Include(
roleAsg => roleAsg.Member,
roleAsg => roleAsg.RoleDefinitionBindings.Include(
roleDef => roleDef.Name, // for each role definition, include roleDef’s Name
roleDef => roleDef.Description)));
ctx.ExecuteQuery();
Hope it could help
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help

Disable the multiple Logons in ECC6 and allowing few users

Dear All,
I need to disable the multiple Logons in ECC6 and allowing few users, can multilogin in system.
I have seen that the parameter login/disable_multi_gui_login and login/multi_login_users can be set.
But need to know did any once use in Ecc6 system and what values to be given in login/multi_login_users.
Please suggest .
Regards,
Kumar

I have found an exmaple on the web of using javascript (it opens a child window that polls the parent window, and invalidates the session if the parent window is closed). I agree there always appears to be loop holes around most of th e solutions i've come across.
I had the same idea about invalidating any previously known session for the same userid, I'm pretty new to the java/web app world so I'm struggling with finding the information I need. I couldn't find any methods to call to invalidate another session, I only came accross example where the current session invalidated its own session via call to the session object, do you have any idea how I would do that for other sessions.
Mant thanks for your input.
Derek.

RDS 2012 R2 - Allow Some Users Multiple Logon Sessions and Restrict Other Users to a Single Session

In Server 2012 R2 RDS, is there a way to allow some users to log on multiple times, but restrict other users to a single logon? On an OU or AD group basis?
I know there is a GPO setting under Computer Configuration for restricting users to a single logon, but this does not allow me to differentiate on a user basis (only on a per server basis).
Thanks,
James

Hi James,
From my perspective and knowledge, sorry to say but there is no such option\way to provide this permission at same time. If a user specifies a different program to start when the user connects to the RD Session Host server, a new session will be created on
the RD Session Host server for the user, even if the RD Session Host server is configured to restrict users to a single session. A user can specify a program to start on connection on the Programs tab under Options in Remote Desktop Connection.
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Read Only Access while assigning Analysis Types and Reports in User/Group

Hi Team,
While Assigning Analysis Type,Reports and Workbooks to User "Read" option is not enabled. It is not working and as soon as we select analysis type ,Only one option is editable "Create/Update/Delete". The other two Option is always there as display "Read" and "Execute" . Execute might work with "Scripts template" but "READ" should work for analysis types and Reports.
We are already struggling with "Read Only" Access in security filter as its not working now.
Thanks
Edited by: user7918731 on Mar 2, 2011 11:22 AM

The behavior for Analysis type, workbook and script as follow:-
The Analysis type create/update/delete option will be enabled, read and execute option will be disabled by default.
The report workbook read option will be enabled, and other two options will be disabled.
The script execute option will be enabled, and other two option’s will be disabled.
For providing “Read Only” access in security filter, Switch to the administration tab, Click on Security Filters, Click on Add button, Open Create Security Filter window, Select the access level to Read Only and select user in assigned user , Click on ok.
It should work.

After Feb 2015 CU viewing list items results in error : requested registry access is not allowed

Hello All,
We recently (Monday) updated our farm to the feb 2015 CU. Since then we have been getting calls in from users that cannot access list items. They receive a correlation error. Looking at the logs the correlation error points to a critical
error: "Requested registry access is not allowed"
Doing some googling, others have seen this error but it is usually associated with managed accounts.
Has anyone else encountered this issue/error? Have you found a solution?
Thanks for your help
environment: SharePoint 2013 enterprise : 6 farm servers : OWA : project server : SQL 2012 always on backend

This would be the service account running the Web Application failing to access the registry key(s). What you should do is set up
Process Monitor to look at Registry keys, and look for ACCESS DENIED.
One thing you could just try out would be to run:
Initialize-SPResourceSecurity
Also, do you mean the March 2015 CU?
Trevor Seward
Follow or contact me at...
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Can a user be a developer and an admin user in the same workspace?

Hi
We have just upgraded one of our environments from APEX 3.2 to Apex 4.1.
In our existing apex applications version 3.2 we have the senior developer users set up with both user is an administrator and user is a developer set to yes.
When I try to set up the same in Version 4.1 I only seem to be able to set the user up with either developer or admin and not both as the user is a developer radio button is greyed out when user is and adminstator is selected.
Is it not possible in 4.1 to be an administrator and a developer. Does this mean that one person may have to have 2 logins if they are performing an adminstrator and developer role in Apex 4.1?
Please advise
Regards
Kay

Hi,
When you set user as admin, it is same as in Apex 3.2 admin+developer
Regards,
Jari
http://dbswh.webhop.net/dbswh/f?p=BLOG:HOME:0

Image instead of List Name, and hyperlink the image to view 'All Items.aspx' page

Hi,
I would like remove the Page title for list (i.e., name of the list in view all items.aspx page) , and instead use image and hyperlink the image
to 'All items.aspx" page.
Using developer tool found the element (#PageTitle) and added 'Script Editor' webpart and below css script to it. I am successful in replace the
title to image, however, I am unable to add the HTML tag for hyperlink. Where do I need to add or how do I add? Could anyone help me please??
<style type="text/css">
#pageTitle
background-image: url('http://w2k81368:2116/SiteAssets/Test.jpg');
background-repeat:no-repeat;
text-indent: 100%;
white-space: nowrap;
</style>
Regards,
Sunitha

Hi Sunitha,
According to your description, my understanding is that you want to change the list title to an image.
I recommend to add the code below to the list page:
<script src="http://code.jquery.com/jquery-1.10.2.min.js" type="text/javascript"></script><script type="text/javascript">
$(document).ready(function (){
var s = "<img alt='SP' src='http://w2k81368:2116/SiteAssets/Test.jpg'>";
var $t = $("#DeltaPlaceHolderPageTitleInTitleArea span span a");
$t.html(s);
</script>
After that, the list title will change to the image and it will show allitems.aspx page when clicking the image.
Thanks,
Victoria
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Victoria Xia
TechNet Community Support

Internet Routing a limited-access PC to my iMac AND xbox 360

Hello All,
I have a company work computer (PC) at home which does not have administrative access, however, I've been able to download software like firefox and save it to my desktop only.
Next to this PC, I have my iMac. On the other side of the wall, is my tv room with our xbox 360 which is really a powerful online gaming console.
I have been frustrated in the past in routing an internet connection to be shared with the PC and iMac. And now I'd like to share the internet with the 360 at the same time. I've had to share the internet "cave man" style by unplugging my Comcast Modem, unplug the ethernet connection, reconnect the ethernet from whichever system I want internet on, and then plug in the power.
I have tried many times to make this work but have been unsuccessful as I think it's tricky to make the PC and iMac work together. The IT people at work say the iMac has it's own IP number and I don't know if that's prevent the network from working. I've been trying to research the "how-to" and came across something about a "DHCP" but I don't even know if that's my issue.
I'm reluctant in buying an airport router from Apple because it's not 100% refundable if the packaging is open.
If you can help, please teach me how to do this. A huge thank you in advance.
Thank you!

By default most routers do not use the MAC address for distributing connections, but they can be configured to do so. Modern routers' security settings can be configured to allow access only to machines whose MAC addresses have been entered into the Include list. This creates a "private" network only accessible to those whose MAC addresses have been added to the list, and prevents others from gaining access to the network. Used together with passwords and firewalls they provide effective barriers to prevent unwanted access to the network. Using the MAC address is a good way of securing a wireless network from access by users "outside" of the local network.
The mechanism used to share an internet connection is called NAT (Network Address Translation) that is used to "map" a real IP address (the one received by the modem from the ISP) to multiple devices. The actual assignment of the local IP numbers is usually done by the DHCP server in the router (Dynamic Host Configuration Protocol.) The DHCP server obtains all the IP parameters required by connected devices so they can communicate through the router - the important ones being the Gateway IP, real IP, network mask, and the local IP.
In theory a router makes it possible for multiple device such as a Mac, a PC, an XBox, and a printer to all connect to a local network and to communicate with each other. I don't use any gaming machines like an XBox, but my home LAN is setup using an Airport Extreme Base Station that is connected to my cable modem and to a high speed network switch. I have three computers, two network printers, and a SlingBox currently connected in the network. The latter connects wireless from an Airport Express. In addition to the devices normally connected there are two other laptops that may connect wirelessly when needed. I have a second Airport Express in the house that is used to help extend the network because my house has plastered walls with metal laths that tend to reduce wireless signal strength.

Add Trusted Sites by GPO and allow the user to edit / add Trusted Sites manually.

Hi All
Greetings for the day....
I have task to add a few Sites in Trust zone, Where I am succeed allowing them by GPO. As user requested to allow him to add Sites to add / edit manually. When I applied the Security Zone : Do not allow user to add sites to disabled , but it not allowing.
IE options greyed out.
Need your valuable expertise.
J D Tech Guy........

Hi,
On local machines, this setting will be grayed out and users can’t change it, if we configured the setting from the following node:
User Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page\
Site to Zone Assignment List
However, we can try using GPP Registry to deploy the setting, for this will allow users to change the setting.
Regarding this point, the following two threads can be referred to as reference.
Managing Trusted Sites through Group Policy Preferences
http://social.technet.microsoft.com/Forums/windowsserver/en-US/5af55e6e-5495-404e-96bf-4183e8358245/managing-trusted-sites-through-group-policy-preferences?forum=winserverGP
Add Trusted Sites via GPO but still allow users to add trusted sites
http://community.spiceworks.com/topic/326140-add-trusted-sites-via-gpo-but-still-allow-users-to-add-trusted-sites
Please Note: Since the second website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of
this information.
Best regards,
Frank Shen

Is there a way to create a table in powerpoint and allow the users to fill in answers?

My beekeeping group wants a table layout question with dates, and the user would have to fill in the numbers after each day.
Date
Answer
June 1
insert drone fram
June 5
Check drone frame for mites
June 9f
Pull frame and freeze it to kill mites

You'll have to create it in Captivate, importing ppt-slides just turns them into movie slides.

How can I create a button to open email client and allow the user to e-mail pdf to a friend?

I need to find a way to let our members share our marketing pdf files with their friends as an email attachment. I can only seem to find a way to send a mailto to a specific address. I am thinking that the form is the only way to create that possibility, but would be open to any help even if not by a form.

Thanks you but I want the end user to be able to open my pdf file from my website and email it as an attachment to their family and friends. ( no specific email address assigned) I tried adding a empty mailto tag and it opens the email client, but no attachment. I don't think I am making my question understandable and maybe it is not possible to do this in Acrobat.

Multiple user creation in R12 and migration of users

I would like to know how we can automate a process of user creation in R12, or is there a way to create multiple users in Ebiz with respective responsibilities.
Second case is, migration of users from one instance to another. The problem out here is selective users not all?
Regards

Pl search the forums for FND_USER package - you will find several hits that show how this package can be used in a programmatic fashion to bulk create new users and assign responsibilities. Examples are also available on My Oracle Support.
To migrate user, use FNDLOAD. See this doc - you will also find hits in these forums if you search.
376469.1 - Can FNDLOAD Migrate User Accounts Without Forcing Users To Change Their Passwords?
HTH
Srini

Removing registered user from old iphone and setting new user on it

Ya i had a Iphone 3g and updated to the iphone 4 and got all set up it no prob then cleard the 3g and gave it to my sister and she synced it to her library no prob but when she goes to download a app it asks for my log in

How did you clear the iPhone 3G?
Was it cleared by restoring the iPhone with iTunes as a new iPhone or not from the iPhone's backup with iTunes on your computer, or did you use the erase all content and settings option on the iPhone?
If she is logged in to iTunes with her iTunes account on her computer and her computer has not been authorized with your iTunes account with iTunes, then your iTunes account should no longer be available on the iPhone.

Limited-access user permission lockdown mode and allowing anon users to view list items

Similar Messages

Maybe you are looking for