Sharepoint 2010 restrict access to a document library unless loggin to domain

Have a requirement that has stumped me for awhile. we have a Sharepoint 2010 site that has some document libraries that have to be setup to ONLY allow users that are loggin to the domain to be able to access those libraries.
We are currently using active directory to authenicate user on login. and use active directory security groups for site, page and library access.
Any ideas if this is possible and if so where to start?

the easy answer: nothing built in can do that.
options can include: custom dev (potentially lots of it), "intelligent" app firewalls/proxies... but the practical answer is to either trust users with information, or disable public access (thus SP would *only* be accessible via LAN / VPN routing)
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs

Similar Messages

How to control access to a document library based on fields of the list?

Hi,
I need to give access to a document library but the users who need permission are unknown until the form
is submitted to the document library. The 2 users information are in 2 fields of the form. I created a infopath form and a workflow with it.
I need to give the "CreatedBy" user, the person who completed and submitted the form, and the
Requester (a data field on the form), both need access to the new document library or just to the forms they submitted. How do I setup access for the createor and requester of the form? These are unknown until the time of the form submission and
it's dynamic.
Anyway to implement this in SP? If not what about coding for when the form is loaded. Can
someone point me to a sample coding for ref fields in the form when form is first loaded up? Also, how to redirect to a access denied view in the code.
Thank you.

It's not easy OOTB but it can be done if you either use code or use some code someone else created.
Have a look at this on codeplex
https://spdactivities.codeplex.com/wikipage?title=Grant%20Permission%20on%20Item

Restrict access to bw_metadata documents in WAD NW04S

Dear All,
We are deploying a new reporting and analysis application on NW04S BI.
In this application we set in a toolbar an access to some help documentation that are stored in KM as bw_metadata documents for the concerned web template (command OPEN_DIALOG_DLG_DOC_BROWSER).
But the problem is that every one is able to create, change and delete these documents !
I would like to restrict the access to these documents only in read for everyone and change for some power users.
In the permissions in KM, i cannot change access on this repository.
Did someone have an idea on how to change these permissions/authorizions ?
Thanks in advance for your suggestions.
Fred.

Fred,
sorry about that did not see the KM part...
help.sap.com still talks about setting up the BI document repository on the portal and not about KM when I did a search for OPEN_DIALOG_DLG_DOC_BROWSER ,
http://help.sap.com/saphelp_nw04s/helpdata/en/43/17348cfa923614e10000000a422035/content.htm
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/0901c9bb-0601-0010-49ab-c1770c527673
The WEB API does not seem to make a distinction betweek KM and the BDS . and not much given on single document..... maybe the single document is worth a try....
Arun
Hope it helps...
P.S BTW is the WEB API for 7.0 documented anywhere ? not able to find the same .. keep running into the 3.x version ....

Restricted access to confidential documents in DMS

Hello Gurus,
Need your expert guidance on the following requirement.
The requirement is to restrict the access of the document to users like Author, Reviewer and Approver, for all the documents.
I am confused which authorization object will work in my case and what settings I've to maintain for this.
Authorization Object C_DRAW_BGR u2014 Authorization Group
Authorization Object C_DRAW_DOK u2014 Document Access
Authorization Object C_DRAW_TCD u2014 Activities for Documents
Say I am having document types to us those are confidential.
ABC (finance docs)
LMN (Legal docs)
XYZ (design docs)
We want to allow only the users who are having below roles.
DMS_APPROVER
DMS_REVIEWER
For rest of the user we don't want to allow change/display acccess to the above documents.
Please guide me how to proceed, what need to be done.
Regards,
Ganesh

Hello Ravindra/DMS Gurus,
Sorry, but still my requirement is not met.
Actually our business scenario is as below:
Say there is a special document Type APR (Employee appraisal document)
And for 5 different employee created (Authors) the document giving their self-inputs.
Now these employee are assigned to say 3 different Supervisors (Reviewers) and one Manager (Approver)
{Author; Reviewer and Approver are maintained in Additional Data of the document.}
So each document will have a Reviewer and Approver assigned along with the Author.
Our requirement is to restrict the access of these 5 documents to the Employees (Authors), so that none of these employee can view each others document. And allow display/change to respective Supervisor (Reviewer) and Manager (Approver) only.
We need to restrict document access based on the above scenario
After checking, I think using authorization object the above requiremment can not be met. Can we use any user exit?
Your valuable comments are appreciated.
Regards,
Ganesh
Edited by: ganesh sarasvati on Aug 12, 2010 5:35 PM
Edited by: ganesh sarasvati on Aug 12, 2010 5:37 PM

Office 2013 vs SharePoint 2010 - Unable to check out documents to SharePoint drafts folder

My company is foisting Office 2013 on us without upgrading SharePoint 2010 Enterprise. One of the issues I have discovered since receiving Office 2013 is that SharePoint no longer provides the option to save checked out documents to my local drafts folder.
This is despite having Office set to save checked-out files to the server drafts location and the Office Document Cache Handler enabled in IE9. Is there a registry setting or something I can change that will re-enable this feature?

Hi Nellie,
According to your description, my understanding is that you want to re-enable the add-on Office Document Cache Handler in IE9.
We can re-enable the add-on in IE9 using Group Policy:
Launch the Group Policy Editor.
Go to User Configuration > Administrative Templates > Windows Components > Internet Explorer > Security Features > Add-on Management >
Add-on List.
Set this policy to 'Enabled'.
In the Add-on List, add the CLSID of BHO (Browser Helper Object) (i.e.) {B4F3A835-0E21-4959-BA22-42B3008E02FF} as the ‘Value Name’ and 1 as the 'Value'.
Log out of the machine and log back in again for the setting to take effect.
More references:
http://support.microsoft.com/kb/2463597/en-us
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Problem restricting access to additional document directory

Hi,
Plattform: Win2K + iPlanet 6sp6
I'm having a bit of a problem setting restrictions on an addtional document directory (the "manual" directory is a good example).
I have a couple of virtual servers.
I do not want to use .htaccess.
Is it at all possible ?
any pointers ?
Best wishes,
B.L

Is it possible?Yes.
Any pointers?Umm. Use the "Restrict Access" screen to select the directory you want to restrict, and then set the permissions for it.
Without knowing what kind sof problems you're having we can't really make any recommendations.
Are you following the instructions in the Admin Guide?

CHARM - Restrict access to other documents

Dear All,
When Change manager approves the CR & assign the developer, mail will trigger to developer & he will starts development, thats ok. If the ticket is not assigned to me and if i tried to open the UC, system should not allow me to open that ticket itself. How can we do this ? If my BP number is not assigned in that ticket, system should not allow me to open the ticket, is this possible ?
regds,
CB

Hello Kallumama
you have two different options to achieve this:
- first one is playing in CRMBS02 with the authorization codes. As a result, people will have access to tickets according to user status of ticket and not according to who the ticket is assigned to
- second one (and maybe better for you) is BAdI crm_order_auth_check. Thanks to MF 'CRM_ORDER_READ' you retrieve who is assigned to your ticket, then thank to a specific MF or to a Z evaluation path you ll have to get the BP assigned to SAP User who is trying to access to ticket; after comparaison if first is different from second then write an error message. That will not authorize User access in change mode to ticket !
Regards,
Khalil

Sharepoint 2010 document library pdf files are storing in browser cache when it is opened in browser

i have sharepoint 2010 site which consists of document library with pdf files if we click on pdf file it will open in browser .But the thing is it is storing in browser cache so i need to restrict that pdf to not store in browser cache.
A,ny suggestions please

Hi,
We can use jQuery plugin to open the PDf file in browser.
The following link for your reference:
http://www.jqueryrain.com/2012/09/best-jquery-pdf-viewer-plugin-examples/
Best Regards
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Issues with 'Content Organizer Rules' of SharePoint 2010

Hi Everyone,
Hope all's going well. I have configured Content Organizer Rules for my SharePoint application. It's configured properly and its routing documents to the desired folder in other libraries of the site.
I want these rules to be applied to a particular library, however they get applied to all libraries in the site collection.
Is there any way to restrict 'Content Organizer Rules' not to be applied on some specific library.
Thanks in advance,
Waseem Khan

Hi,
We can create a New Rule in Content Organizer Rules, then set the particular library in
Target Location.
More information:
http://community.bamboosolutions.com/blogs/sharepoint-2010/archive/2010/11/03/sharepoint-2010-cookbook-content-organizer-for-document-library.aspx
http://blog.scosby.com/post/2011/03/16/SharePoint-2010-Content-Organizer-Client-Object-Model.aspx
Best Regards
Dennis Guo
TechNet Community Support

Getting Error In Item Added Event In Event Receiver in SharePoint 2010

Hi Guys,
I have written Event Receiver in SharePoint 2010 On ItemAdded event of Document Library. Wants to increment a col value by reading maximum value first. I wrote below code but sometime it works correctly but some time I got below error: Document Set
enabled on this document library and weh we added any document in any document set then this event occurred. I mentioned Code block and Error description both.
Please see and suggest right solution.
Code:
public override void ItemAdded(SPItemEventProperties properties)
                base.ItemAdded(properties);
                SPListItem _currentItem = properties.ListItem;
                string _QUERY = @"<Where><Eq><FieldRef Name='DocumentId'/><Value Type='Text'>21</Value></Eq></Where><OrderBy><FieldRef
Name='RevisionReference' Ascending='False' /></OrderBy><ViewFields><FieldRef Name='RevisionReference' /></ViewFields><QueryOptions><Folder>DocumentLIBB/</Folder></QueryOptions>";
                int maxID = 0;
                string revisionreferencee = string.Empty;
                using (SPWeb web = properties.OpenWeb())
                    SPList list = web.Lists["DocumentLIBB"];
                    SPQuery query = new SPQuery();
                    query.ViewAttributes = "Scope=\"Recursive\"";
                    query.Query = (_QUERY);
                    SPListItemCollection results = list.GetItems(query);
                 if (results.Count > 0)
                        SPListItem item = results[0];
                        revisionreferencee = item["RevisionReference"].ToString();
                        bool result = Int32.TryParse(revisionreferencee, out maxID);
                        _currentItem["RevisionReference"] = maxID + 1;
                        _currentItem["DocumentId"] = item["DocumentId"].ToString();
                properties.ListItem.File.Update();
                _currentItem.Update();
Error Desc:
<nativehr>0x81020015</nativehr><nativestack></nativestack>The file EKENg LIBB/QA_DOC_044/05-22 Emirates Engineering Occurrence_Error Investigation - MEDA Process - 27 AUG 2009-921.doc has been modified by SHAREPOINT\system
on 27 Aug 2012 12:10:13 +0400.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Runtime.InteropServices.COMException: <nativehr>0x81020015</nativehr><nativestack></nativestack>The file EKENg LIBB/QA_DOC_044/05-22 Emirates Engineering Occurrence_Error Investigation - MEDA
Process - 27 AUG 2009-921.doc has been modified by SHAREPOINT\system on 27 Aug 2012 12:10:13 +0400.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Making the event synchronous (rather than the default) eliminates this error. If such a change suits your requirements you should consider it. You just have to tweak the elements.xml in your feature receiver project;
http://blogs.msdn.com/b/unsharepoint/archive/2010/11/10/sharepoint-event-receivers-making-asynchronous-event-synchronous-to-avoid-save-conflict-error.aspx
w: http://www.the-north.com/sharepoint | t: @JMcAllisterCH | c: http://www.b-i.com

SharePoint 2010: How to map documentset attibutes to objects - In SharePoint Webpart

Hey,
I guess it's a pretty simple question but I really do not get one inch closer to a solution. I'm working on a WebPart on SharePoint 2010 which manages a documentset (document library with an custom content type). Creating an storing of documentssets works fine
by now but I do have problems in mapping the stored sets to my c# objects backwards. I actually do not find the fields in my object structure while debugging my code
I create the docuemtset like this...
internal DocumentSet CreateDocumentSet(SPList spListObject, SPContentType spContentType, object itemToCreate, Type typeOfItemToCreate)
var properties = new Hashtable();
Guid id = Guid.NewGuid();
//Description
foreach (PropertyInfo p in typeOfItemToCreate.GetProperties())
properties.Add(p.Name, p.GetValue(itemToCreate, null));
SPFolder parentFolder = spListObject.RootFolder;
DocumentSet docSet = DocumentSet.Create(parentFolder, InnovationListName + "_" + id, spContentType.Id, properties, false);
return docSet;
I'm thinking of somethink like this ...
internal MyObject DocSetToObject(SPList list, int ID)
var docset = DocumentSet.GetDocumentSet(list.GetItemById(ID).Folder);
return new MyObject
Text= docset...,
Id = docset...,
Tags= docset...,
Title = docset...,
Hope you can help me out.. This problem is killn me ^^ ;-)
Thanks
Spanky

Hi,
According to your description, you might want to create a class to perform the CRUD operations against a DocumentSet in your library.
Here is a demo about how to handle an item for your reference:
//Create a MyItemWrapper.cs:
public class MyItemWrapper
public int ID { get; set; }
public string Title { get; set; }
SPList list;
SPListItem item;
public MyItemWrapper()
using (SPSite site = new SPSite("http://sp"))
using (SPWeb web = site.RootWeb)
list = web.Lists["List2"];
item = list.Items[0];
this.ID = item.ID;
this.Title = item["Title"].ToString();
public void setTitle(string t)
item["Title"] = t;
item.Update();
this.Title = t;
Feel free to reply if this is not what you want.
Best regards
Patrick Liang
TechNet Community Support

Best way to restrict access to documents (outside of the group or library level)

Hi, we're thinking of implementing SharePoint Server 2013 Standard Edition for our organization. Many of our employees are research scientists working on proprietary information. From the (admittedly little) I understand about SharePoint, if a user wants
to restrict access to a particular document to the 2 or 3 people with whom they're collaborating (and also have it not appear in the search results), they will have to email their power user to request that a new document library be created in which they can
store their documents. Is that correct? In this case, what is the best way to handle item-level permissions? Users absolutely want to have the freedom to restrict access to their documents themselves rather than being forced to go to their power user. Thanks.

Hi,
Per my knowledge, if you want to restrict access to the documents to some users, then you need to have Manage Permissions permission to modify other users’ permission on the documents.
If you do not have the Manage Permissions permission, I recommend to ask the site administrator to create a workflow as below to remove the corresponding users’ permission on the documents which you uploaded. You can start the workflow on the document you
upload and then the permission of the users set on the workflow will be removed from the document.
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Opening Document Library PDF in a New Window (Sharepoint 2013)

Hello,
I have numerous PDF's in a document library. When the PDF opens in the browser, the PDF's contain links to various other sites; however, when the user clicks the link on the PDF from the document library, the link opens in the same window as the PDF. I would
like the link to open the PDF in a new browser window.
I have searched Google but cannot find anything for SharePoint 2013. We are hosting our SharePoint on the Office 365 package. I found one solution that is repeated on many forums, but I do not see the "Convert to XSLT data view" anywhere
in SharePoint designer 2013. The solution states:
"Edit the document library in SharePoint Designer.
1. Open the site in SharePoint Designer and then open the document library allitems.aspx.
2. Right-click the document library web part and select “Convert to XSLT data view”.
3. Locate the name column, you will see this tag “<A onfocus="OnLink(this)" HREF="{@FileRef}"….. ”, add “target=”_blank”” in tag.
4. After this, the documents will be opened in a new window."
I do see my allitems.aspx and can open that with a text editor. The contents of that file are:
<%@ Page language="C#" MasterPageFile="~masterurl/default.master" Inherits="Microsoft.SharePoint.WebPartPages.WebPartPage,Microsoft.SharePoint,Version=16.0.0.0,Culture=neutral,PublicKeyToken=71e9bce111e9429c" %> <%@ Register Tagprefix="SharePoint" Namespace="Microsoft.SharePoint.WebControls" Assembly="Microsoft.SharePoint, Version=16.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" %> <%@ Register Tagprefix="Utilities" Namespace="Microsoft.SharePoint.Utilities" Assembly="Microsoft.SharePoint, Version=16.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" %> <%@ Import Namespace="Microsoft.SharePoint" %> <%@ Assembly Name="Microsoft.Web.CommandUI, Version=16.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" %> <%@ Register Tagprefix="WebPartPages" Namespace="Microsoft.SharePoint.WebPartPages" Assembly="Microsoft.SharePoint, Version=16.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" %>
<%@ Register Tagprefix="ApplicationPages" Namespace="Microsoft.SharePoint.ApplicationPages.WebControls" Assembly="Microsoft.SharePoint, Version=16.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" %>
<asp:Content ContentPlaceHolderId="PlaceHolderPageTitle" runat="server"><SharePoint:ListProperty Property="TitleOrFolder" runat="server"/> - <SharePoint:ListProperty Property="CurrentViewTitle" runat="server"/></asp:Content>
<asp:content contentplaceholderid="PlaceHolderAdditionalPageHead" runat="server">
<SharePoint:RssLink runat="server" />
</asp:content>
<asp:Content ContentPlaceHolderId="PlaceHolderPageImage" runat="server"><SharePoint:ViewIcon Width="145" Height="54" runat="server" /></asp:Content>
<asp:Content ContentPlaceHolderId="PlaceHolderLeftActions" runat="server">
<SharePoint:RecentChangesMenu runat="server" id="RecentChanges"/>
<SharePoint:ModifySettingsLink runat="server" />
</asp:Content>
<asp:Content ContentPlaceHolderId ="PlaceHolderBodyLeftBorder" runat="server">
<div height="100%" class="ms-pagemargin"><img src="/_layouts/15/images/blank.gif?rev=32" width='6' height='1' alt="" data-accessibility-nocheck="true"/></div>
</asp:Content>
<asp:Content ContentPlaceHolderId="PlaceHolderMain" runat="server">
<WebPartPages:WebPartZone runat="server" FrameType="None" ID="Main" Title="loc:Main" />
</asp:Content>
<asp:Content ContentPlaceHolderId="PlaceHolderPageDescription" runat="server">
<SharePoint:ListProperty CssClass="ms-listdescription" Property="Description" runat="server"/>
</asp:Content>
<asp:Content ContentPlaceHolderId="PlaceHolderCalendarNavigator" runat="server">
<SharePoint:SPCalendarNavigator id="CalendarNavigatorId" runat="server"/>
<ApplicationPages:CalendarAggregationPanel id="AggregationPanel" runat="server"/>
</asp:Content>

did you try this one?
http://social.technet.microsoft.com/Forums/sharepoint/en-US/71b24f4b-570a-48fa-9ec3-91073eafaebd/open-pdfs-in-new-window?forum=sharepointadminprevious
or trying to use the content editor web part...
http://social.technet.microsoft.com/Forums/sharepoint/en-US/9db08c4a-b53c-419a-84f8-001c194d1311/how-to-open-sharepoint-document-library-pdf-file-in-new-window?forum=sharepointadminlegacy
try this solution...check the column which having the clickable link.
http://social.technet.microsoft.com/Forums/sharepoint/en-US/99e9559a-da76-4722-982c-882b3e4181c7/hyperlink-column-type-open-in-new-window
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

Office Web Apps - Preview Sharepoint 2010 documents in Sharepoint 2013 Search Results...again

Hi,
I found a thread in this forum With an answere to a similiar question here:
http://social.technet.microsoft.com/Forums/en-US/28bc1e27-4a65-4c61-9b3e-cb9dad17f779/office-web-apps-preview-sharepoint-2010-documents-in-sharepoint-2013-search-results?forum=sharepointsearch&prof=required
...With the answere:
"OWA uses an access token to talk to SharePoint 2013. It cannot use this when talking to 2010. In order to work with 2010, you have to create a custom display template that converts the file url to an openurl link. "
BUT...
may anyone give more information how to do this?
Links to articles? Links to description and samples?
jik

Hi,
According to your description, my understanding is that you want to preview documents from SharePoint 2010 in search results in SharePoint 2013.
Per my knowledge, the Office Web Apps is configured to work with SharePoint 2013, so it will not work with documents in SharePoint 2010.
I recommend to configure Office Web Apps to work with SharePoint 2010
and make sure that documents can be previewed in SharePoint 2010 using Office Web Apps to see if the documents can be previewed in SharePoint 2013 search result.
http://technet.microsoft.com/en-us/library/ff431687(v=office.14).aspx
Best regards.
Thanks
Victoria Xia
TechNet Community Support

How to backup SharePoint Document Library

I have SharePoint 2010 And I have used it as document management system, I wandered if make backup to SharePoint database is enough to backup our documents in another word Documents is stored in SharePoint database, please advise.

You're asking a good question, but the problem is that its one that can take a
great deal of time to answer in depth. I'll try to cover the broad strokes here...
Yes, backing up your SharePoint content databases will technically create a backup of the documents that you are uploading into the SharePoint sites stored in those content databases.
BUT , there's a lot more to consider than just that. The bullet points below cover some of the big ones off the top of my head:
SharePoint stores documents in its content databases using the Binary Large Object (BLOB) data type. It is not possible to directly extract a document from a SharePoint database without going through SharePoint, at least not in a manner supported by MS.
This means that you must re-attach the restored content database to a live SharePoint farm in order to get to those documents again once you've restored the database from backup.
And that means that you'll have to rebuild an entire farm and reattach that database to it, not something that can usually be done quickly.
In order to reattach that database backup to a SharePoint farm, your new farm must be patched to at least the same version as the farm where the content database originated. So you have to be careful to track the version of SharePoint you used in the farm
and rebuild to that level.
If the site collections in that content database used any custom code, site templates, web parts, etc, you must install those into your new farm, or there's a good chance your site's won't work and you won't be able to access your content.
You'll have to re-do all of the configuration settings you customized in your new farm as well, if you want it to be able to replace the functionality of your current farm. SharePoint 2010 does introduce configuration database backups, but they're not a
complete solution (they don't include ALL of the configuration data for your farm).
Changes to the configuration of your sites in IIS, files in the SharePoint root directories, Active Directory, etc, are not captured in SQL Server or SharePoint backups. You'll need to back them up yourself.
I will qualify my comments by saying that I'm talking about this stuff from an overall Disaster Recovery perspective, not from a targeted approach to protect some specific highly important documents you're putting into SharePoint. But this is all stuff you
have to consider if you're going to use SQL Server to protect those documents.
I would recommend also taking a look at SharePoint's ability to save a document library or list as a template with content included, this can allow end users to save content on their own through the SharePoint site's UI and protect it. Or, you can use the
Export-SPWeb PowerShell CMDLET (http://technet.microsoft.com/en-us/library/ee428301.aspx ) to script out the protection of that document library as well.
Does that all make sense?
John
MCTS: WSS v3, MOSS 2007, and SCOM 2007
MCITP: Enterprise Project Management with Project Server 2007
Now Available on Amazon - The SharePoint 2010 Disaster Recovery Guide. Also available -
The SharePoint 2007 Disaster Recovery Guide.
My blog: My Central Admin.

Sharepoint 2010 restrict access to a document library unless loggin to domain

Similar Messages

Maybe you are looking for