Web Part Error: Access Denied

Question

I'm currently playing around with SharePoint 2010 but have come across an issue when using the standard Document Library and Announcement web parts. If I change the permissions to a list or library from inherited to custom permissions if a user doesn't have access to the list or library the web part displays the error shown below, instead of not displaying the web part to the user.

Web Part Error: Access denied. You do not have permission to perform this action or access this resource.

The thing thats confusing me is that the error only shows if the web part is within a web part pane, if I add the web part to a rich content area and a user doesn't have permissions to see a list it simply doesn't display.

If anyone knows how this can be resolved, please let me know. It looks like the issue dates back to SharePoint 2007 from what I've seen and have seen a technet article (919550) for SharePoint 2007, but does not yet say it applies to 2010 and have tried the workarounds contained within such as setting the target audience of the web part, but this has had no affect.

update I've since forwarded this issue to Microsoft who have been able to replicate the fault and are currently working on a resolution.

Answer 1

We are seeing this exact same thing while we attempt to upgrade from 2007 to 2010. What is worse, as manemawanna stated, if the user doesn't have rights to the document library, even the Audiences on the web part are ignored and the the web part shows the error.. We use document level security extensively on our sites, and this problem breaks almost all of our document libraries! This will prevent us from upgrading to 2010. I see CU1 is out now, but nothing mentioned there seems to address this issue.

Manemawanna, have you heard anything new from MS on this issue??

Thanks!

Paul

Answer 2

Turns out the functionality I described at the start of the thread is how SharePoint is supposed to work.

Answer 3

But how can this be by design!!!?? The scenario of, having a user acess a site, that in it's homepage has a list view, of a list that doesn't inherit permissions, and the user doesn't have permissons on any item, seems quite a normal scenario, don't you think?

Answer 4

Is it possible to put a rich content area within a web part zone and then insert the data view into that rich content zone?

Answer 5

Is there a solution to this issue? Coming up against it myself a year and a half later...

When trying to add a web part directly to Rich Content rather than a webpart zone, the page looks like it's saving/adding the webpart but once the browser refreshes, there's nothing in the RCE.