Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

SharePoint 2010 is giving me a major headache.

We have a site collection with a number of sites where we are trying to give certain users access to certain areas of the site.

The problem is that before I have even started to try and "Deny" access to anything (read wise) certain pages reports access denied for the user. If I run a "Check-permissions" for that element it reports that the user should have read access correctly...

I have even tried to give him "Full Control" to the group he is a member of, and little does it help.

The only thing I have seen work for giving access is to give the user "Full Read" from the Central administration board. However that suddenly defeats the purpose since we can't block the user from certain areas anymore then (at least it seems so)...

So it must be something "outside" the control of the site collection that he requires access to when visiting those pages, but what might that be?...

What we have is a Site Definition that defines a set of pages, this serves as a template for creating a generic portal for a part of an organization. These pages contains a set web parts that pulls data from lists based on custom content types.

This pages are placed in a "Site Pages" library. Now the page they do have access to as opposed the the ones they don's is in the root of this library, the others are placed in a folder called "_hidden"... If that can have anything to do with it?...

The library is the standard one you get with the "Wiki Page Feature". (Can't remember the exact name as I write this)

ANY help at all would be welcome, I have found many others having similar problems, but nothing that kind of said "AHA..." in my mind yet.

share|improve this question
add comment

4 Answers 4

If you think everything is looking fine with respect to SharePoint thne start looking at the AD security principals instead, has the users account been changed recently, if you're nesting AD groups within SharePoint groups ensure none of those are distribution groups. I've had situations whereby an account got re-created with the same account name yet the SIDs will be different and SharePoint will not recognise the account thereby you will need to perform an SP-MoveUser(?) can't remember the exact cmdlet but there will be something to reassociate the user, however in doing this please be aware it can completely strip out individual permissions across the site collection so there needs to be some care taken when executing that.

share|improve this answer
    
We haven't mapped AD groups in our tests, only users directly, and they haven't changed either. And without modifying any permissions at all, meaning that everything should inherit from root, where access is granted just fine... But for now we have had to recommend that our customer gives full read permission to all authenticated users on the web application level (One level up from the Site Collection). Since that is the only thing we have made work... That is not very desirable though. (as also noted in the question) –  Jens Dec 17 '12 at 9:35
add comment

Not sure if this will help, but I was having a similar issue yesterday. I had users who had access to a site being asked for their password multiple times before being allowed access. The problem turned out to be that I was linking a content editor on that page to a CSS file which was in another document library, that library did not have access permissions for the users so they kept getting prompted for their password.

Any ways, double check that the library that is storing your pages does have permissions so that those users can access it, basically if you broke the permissions for the library this might be the issue.

Also you mentioned the pages they do not have access to are in a folder called 'hidden', does this folder have individual permissions from the library itself or how is it set up?

Not sure if that is the issue for you, but just a thought since I experienced something somewhat similar.

share|improve this answer
    
Can't see it should be any CSS files or like that, because we access the same set of files in all our pages, and since some pages work that would be odd? And I did check the folder, there didn't seem to be anything different about it, but i'm not sure if there is places, however I will try to add a page in that folder containing no content tomorrow, see what happens. Trying to think if there is anything different about those pages in that folder than other pages, maybe also try to add the "same" pages to the root. –  Jens Sep 14 '12 at 20:31
add comment

I had a similar problem a while ago. I'm still not sure what caused the change but I know what fixed it for me. My problem was that I needed to grant READ ONLY access to the masterpage in the master page library. It only happened in one site collection, and once i added All Authenticated Users with read only access the problem was solved.

share|improve this answer
add comment

I had a similar problem where a user was a contractor and account was recreated after returning. after extensive investigation. I sound 1 instance of his user account applied on another sub site but part of the same collection. I removed all instances of the account and then re added the user. and it worked fine now.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.