Configuring Security Settings in the Web.config File

The default security settings in the Web.config file of a SharePoint virtual server allow only a minimum amount of freedom—which makes a lot of sense considering the SD3+C initiative. This section explains the security-related configuration settings in a SharePoint Web.config file.

The SafeControls Section

The first security-related setting is the <SafeControls> section. Before you can add Web Parts to Web Part pages, administrators have to make the server trust a Web Part. This is done by adding a <SafeControl> element to the <SafeControls> section. Each <SafeControl> entry identifies a trusted assembly.

Note

In a typical SharePoint installation, many of the trusted assemblies found in the <SafeControls> ...

Get Microsoft® Office SharePoint® Server 2007 Administrator's Companion now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.