Tuesday, February 12, 2013

No Warning message after adding All Authenticated Users


Hi,

After launching the site collection, if we go to Site Actions->Site Permissions, add All Authenticated Users as a visitor.
Generally warning message to be displayed. But it was not getting displayed. Finally our teammate has found the fix as below

Basically we took existing ENTITYEDITOR.js the below path and written below script under updateControlValue
Path : C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\TEMPLATE\LAYOUTS
//Fix

if(ChkModalDlg != -1) {

    var txtVal = document.getElementById(a).innerText.toLowerCase();
    if (txtVal.indexOf('<span') > -1) {
        txtVal = txtVal.substring(0, txtVal.indexOf('<span'));
    }
    if (txtVal.indexOf('all authenticated users') > -1) {
        if (AllAuthenticatedUserCheck != 1) {
           
            AllAuthenticatedUserCheck = 1;      
alert('Warning - Adding \"All Authenticated Users\" directly into the site can present a security risk by unintentionally allowing access to external groups and 3rd parties.  Use the \"User Provisioning Process\" to request the required access and discuss with your SharePoint Business Owner.');
        }
    }
    else {

        AllAuthenticatedUserCheck = 0;
    }

}

Now take backup of the file ENTITYEDITOR.js from the following location in ALL the SharePoint servers.

C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\TEMPLATE\LAYOUTS and replace with new ENTITYEDITOR.js.

Once this is done Restart timer job in all the servers where you copied the file and then restart the servers as well.
Finally after applying the fix as above I was able to see the warning message after adding ‘All Authenticated Users’ as below


                                                 

No comments:

Post a Comment