Results of Penetration Test on SharePoint system

2012-08-012014-11-30 Andy Burnsclickjacking, login, penetration, Security, SP2010 Admin, SP2010 DevelopmentLeave a comment

One of our customers had a penetration test performed on their SharePoint system. I think it’s fairly standard, but it could have a custom login form. In fact, given some of the errors, I think it must have been – but I had little involvement, so I’m not sure. Heck, it could even have been a SharePoint 2007 system, or a new login form that we didn’t write.

Either way, I thought it would be interesting (and a good reminder) to look at some of the issues it threw up… Continue reading “Results of Penetration Test on SharePoint system” →

Excel in SharePoint and "File is Corrupt" Error

2012-07-272014-11-30 Andy BurnsExcel, Office, SP2010 Admin1 Comment

This issue has caught me out several times – but if you’re using Excel on the SharePoint server – which is common during development – you need to turn off the protected views in the ‘Trust Center’ settings of Excel:

I’ve been set straight on this issue at least twice thanks to this post by JOPX. Unless those protected views are turned off then if you download the file you will only be told the file is corrupt – even if you can download the file and open it without any problem.

Check-Out, Locking and Document Co-authoring

2012-07-262014-11-30 Andy BurnsCheck-Out, Excel, Locking, Office, SP2010 Development, Word2 Comments

Following on from yesterday’s post about the difference between Check-Out and Locking in SharePoint, I found myself wondering what happens if you violate a lock? Or a Check Out? Let’s look at locks first… Continue reading “Check-Out, Locking and Document Co-authoring” →

SharePoint: Check-Out vs Lock

2012-07-252014-11-30 Andy BurnsCheck-Out, Excel, Locking, Office, SP2010 Development, SPFile, SPListItem, Word2 Comments

I had been asked to look at a SharePoint event receiver that wasn’t behaving as it should. After a document had been checked in, it would set a property and update the item. However, we were getting an error:

SPException: The file “[File Name]” is locked for exclusive use by [User]

This was unfortunate – the user was the user who’d just been making changes, and the code was running after the document had been checked in – so what gives? Well, it turns out that the message is right – the file is locked, not checked out, and a lock is not the same as a check-out.
Continue reading “SharePoint: Check-Out vs Lock” →

Getting and Setting Properties in SharePoint

2012-07-232014-11-30 Andy Burnsnullable, SP2010 Development, SPPropertyBagLeave a comment

In SharePoint there are “property bags” on many elements of the system. For example, SPWebs and SPFolders have them, and methods like GetProperty() and SetProperty() to set them.

These methods accept and return objects. However, it’s nice to get values back in the same form as they were set. Continue reading “Getting and Setting Properties in SharePoint” →

WSPBuilder – Buildmode oddity

2012-07-202014-11-30 Andy BurnsSP2010 Development, WSPBuilderLeave a comment

Yes, believe it or not, we still use WSPBuilder for a number of our older projects.I recently came across a bit of an oddity, though, regarding the ‘Buildmode‘ parameter. Continue reading “WSPBuilder – Buildmode oddity” →

Office 365 SharePoint – Higher level observations

2012-07-192015-08-11 Andy BurnsOffice 365Leave a comment

Previously I’ve discussed some of the technical observations I made while working with Office 365. I’ve also noticed some ‘higher-level’ features of the project, and some discussions we’ve had about other opportunities. Here are some the the things that might well need addressed… Continue reading “Office 365 SharePoint – Higher level observations” →

Office 365 – Technical observations from a first project

2012-07-172015-08-11 Andy BurnsOffice 365, Sandbox2 Comments

Recently I’ve been working on an Office 365 based SharePoint solution. It’s a system to allow a company to create sites to collaborate with their customers, and I learnt some interesting things on the way. In part 1 I’ll deal with the technical side of things, and in part 2 I’ll look at more ‘project’ level observations. Continue reading “Office 365 – Technical observations from a first project” →

Dealing with Large Lists Part 3 – The ContentIterator

2012-07-132014-11-30 Andy BurnsContentIterator, Large Lists, SP2010 Development, SPQuery1 Comment

In Part 1 we looked at the problem of the query throttle in SharePoint 2010, and in Part 2 we looked at some of the ways of getting around that. In this part, though, we’ll look at what I think is the best way – the ContentIterator control. Continue reading “Dealing with Large Lists Part 3 – The ContentIterator” →

Dealing with Large Lists Part 2 – Coping with large queries

2012-07-112014-11-30 Andy BurnsLarge Lists, SP2010 Development, SPQuery2 Comments

In Part 1 we looked at what throttling was, why queries could be throttled, the settings that control throttling, and some of the references to other useful information. In this post we’ll look at ways of trying to get your query to run anyway, depsite the throttle. “Writing Efficient Code In SharePoint Server” is a good introduction to the general principles. Continue reading “Dealing with Large Lists Part 2 – Coping with large queries” →

Andy Burns' Blog

Whatever I'm working on

SharePoint