Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I have a subsite with unique permissions. Users do not have access to the root, site.

This site has jquery ajax people search which performs a search.asmx. This fails.

even if the path to the _vti_bin/search.asmx

The query result returned is ERROR_NO_AUTHORIZATION

Users can navigate to the _vti_bin/search.asmx

It works if they are added to he visitor group of root site, but I do not want this.

If I add username and password to the ajax request it works again, but is not the solution.

share|improve this question
add comment

1 Answer 1

Access to any Web Service in SharePoint must be authenticated (even if you expose your site for Anonymous users), therefore accessing services address is also. Not sure what does "acceptable" means for you, but you might be creating a security breach as search by default it is enforcing Security trimming.

Kerberos could alleviate your need for authentication, as I imagine currently you are running NTLM.

share|improve this answer
    
Hi thanks for the reply. http://<homesite><subsite>/_vti_bin/search.asmx loads fine for the user. It appears processing the request still requires root access. We are using Kerberos. –  ben Jul 23 '12 at 14:12
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.