This is a hair pulling defect that I cant figure out.
Out intranet has an extended content query web part that is widely used. After our last deployment site owners were unable to modify these web parts. Only site collection owners/authors are allowed to. The code did not change between the last deploy and this one. So this more than likely relates to permissions.
There were issues with users being deleted from groups during the deployment and the administration team seems to have caught them. The user's permissions are still intact for the subsite but are unable to do anything.
I have debugged the solution that contains the web part and no exceptions are thrown either in SharePoint's code or my own and nothing appears in the logs. The only confirmation of an error is the Access Denied page when you try to edit the webpart.
What could be causing this issue? Im not really expecting a solution, but a good place to start looking would be awesome.
Update This isnt just the extended content query web part anymore. Its the base content query web part.
I decompiled the SharePoint dll's using Dot Net Reflector and have finally hit something.
I get an UnauthorizedAccessException in SPRequest.cs in the GetFileAndFolderProperties method.
Working with another developer, we believe it to be permissions around either the List Type or Content Type lists in the Query portion of the Tool Part.
Update SharePoint is trying to reference a language resource file which it doesnt have access to. After checking permissions for all the SharePoint service accounts I can rule that out as they all have at least read access to the en-US.resx files.
Still at a loss :/
The problem has been isolated in the class ExtendedContentByQueryToolPart
A potential fix is to delete the webapplication and recreate it. Trying this on my machine has resulted in my test farm being completely screwed unfortunately. Another possible solution is to upgrade to SP2010. It seems to get rid of it.
What a mess.