Microsoft® Office SharePoint® Server 2007 Administrator's Companion

Authorized Web Parts and Applications

Because SharePoint Server 2007 is designed with a distributed administrative architecture, keep in mind that authorized users will be able to install Web Parts on a site. Authorized users can very easily download Web Parts that have been created on the Internet and then install those parts on their sites. Remember that site and portal administrators delegate the right to add Web Parts to a Web Parts page, and there are protections in place for the administrator to control how much a Web Part can do. Liberal delegation of this right might lead to compromised security in your SharePoint implementation. Unsuspecting users could download an infected or a compromised Web Part, install it, and expose your critical ...