Monday, September 8, 2008

MOSS 2007 - Enable Client Integration


Recently, a work mate has asked me a question about using the "Import Spreadsheet" functionality to create a SharePoint list.

This function seems pretty straight forward to me, unless you trying to use it trough Form Based Authentication.

In my environment I had a web application with single site collection, all using Windows Authentication. He was complaining of not having this option once he tries to create a new list, basically the link wasn't available for him.

I've tried to replicate his issue creating a different user and assigning a different set of permissions to it. That's was the only way to simulate his problem. My site collection administrator had full control over the site, and obviously access to the Import Spreadsheet functionality.

My second user had just "Manage Lists" privileges. When logged in with this second user I couldn't find the Import Spreadsheet link, then I thought is was just a permission issue. Told him to double check his permissions and no luck! Everything seem to be alright, his user had full control but no access to this functionality.

After lots of researches he told me that it end up being a Web Application setting. When setting up Forms Based Authentication for a Web application on MOSS, the last option which is called "Enable Client Integration" is by default set to "No".

"You can disable client integration, which removes features that start client applications. This is the optimal configuration for some scenarios, such as publishing read-only content to the Web for anonymous access. Additionally, if you select ASP.NET forms authentication or Web Single Sign-On (SSO) authentication, client integration is set to No by default."



Having this option disabled, your sites under the web application will behave as following:
  • Links that start client applications are not visible.
  • Documents are opened in the browser.
  • Documents cannot be opened by client applications.
  • Users cannot edit documents on the site directly from the client applications. However, users can download the document, edit the document locally, and then upload the document.
For security reasons ActiveX controls are prevented to work avoiding you to use fundamental MOSS resources! Eg: Import Spreadsheet.

After changing the Enable client integration option to Yes, the import Spreadsheet link becomes availble as well as some other resources.

In my opinion planning authentication methods for MOSS is not a easy task, specially if you decide using FBA. Before choosing it spend some time doing lots of researches and try to find some people who has done it before. You should be aware of the FAB limitations!

For more information: http://technet.microsoft.com/en-us/library/cc263304.aspx

Cheers!

No comments: