2

We have an Audit site and within that we have a Findings subsite. There is a group with contributor access to this subsite called Findings Contributors, and they do NOT have access to the main site.

For some strange reason, they're unable to access the subsite. Does anyone know why this group might not be able to access the subsite?

Access Denied. Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)), StackTrace: at Microsoft.SharePoint.Library.SPRequestInternalClass.GetListsWithCallback(String bstrUrl, Guid foreignWebId, String bstrListInternalName, Int32 dwBaseType, Int32 dwBaseTypeAlt, Int32 dwServerTemplate, UInt32 dwGetListFlags, UInt32 dwListFilterFlags, Boolean bPrefetchMetaData, Boolean bSecurityTrimmed, Boolean bGetSecurityData, Boolean bPrefetchRelatedFields, ISP2DSafeArrayWriter p2DWriter, Int32& plRecycleBinCount) at Microsoft.SharePoint.Library.SPRequest.GetListsWithCallback(String bstrUrl, Guid foreignWebId, String bstrListInternalName, Int32 dwBaseType, Int32 dwBaseTypeAlt, Int32 dwServerTemplate, UInt32 dwGetListFlags, UInt32 dwListFilterFlags, Boolean bPrefetchMetaData, Boolean bSecurityTrimmed, Boolean bGetSecurityData, Boolean bPrefetchRelatedFields, ISP2DSafeArrayWriter p2DWriter, Int32& plRecycleBinCount). f7f92c9d-b400-6057-49ef-a8b3f8d19374

Improve this question
8
  • On the subsite did you break permission inheritance?
    – Amit Kotha
    Commented Sep 11, 2015 at 18:15
  • is this a migrated site? if so check if the user names are converted to Claims. User names should start like "i:0#.w|domain\user" instead of "domain\user"
    – Aslan
    Commented Sep 11, 2015 at 18:15
  • Yes, the subsite has unique permissions and we recently upgraded our environment from 2010 to 2013. However, I'm unable to confirm if these permissions worked correctly in 2010.
    – The Vanilla Thrilla
    Commented Sep 11, 2015 at 18:15
  • Can you try with this tool what is happening in the ULS log? sharepointlogviewer.codeplex.com (look for the keyword access denied)
    – Amit Kotha
    Commented Sep 11, 2015 at 18:22
  • Do you know of a way I can narrow it down more?
    – The Vanilla Thrilla
    Commented Sep 11, 2015 at 18:34

2 Answers 2

Reset to default
1

Make sure they still have "Limited Access" permission in the root site. This should be assigned automatically by SharePoint but something to check.

what is limited access?

In SP2013 you won't see Limited Access on the permission pages. The Sharegate article above says you will see this message but I have not been able to get that to work:

"There are limited access users on this site. Users may have limited access if an item or document under the site has been shared with them”.

Instead, you can use Powershell to verify that Limited Access is being granted as expected. 

$web = Get-SPWeb <web url>
$web.RoleAssignments | ft Member,RoleDefinitionBindings

If you don't see the permissions you expect, I would try removing the permissions and reassign them in the subsite. This should make SharePoint grant limited access at the root. I've tested this in my environment. I have a list with broken inheritance. When I assign a user permissions to this list, that user is granted Limited Access at the root.

Improve this answer
8
  • How can I check this? I'm at the site collection level, but I don't see "Limited Access" listed under the different permission groups?
    – The Vanilla Thrilla
    Commented Sep 11, 2015 at 20:16
  • I've updated my answer with more details.
    – Lance
    Commented Sep 11, 2015 at 20:30
  • I'm not seeing this message. On the sub-sites permissions page, all I see is This web site has unique permissions. I'm worried that SharePoint is failing to automatically give the necessary Limited Access permissions.
    – The Vanilla Thrilla
    Commented Sep 14, 2015 at 12:38
  • The message would appear at the root.
    – Lance
    Commented Sep 14, 2015 at 12:44
  • It says, Some content on this site has different permissions from what you see here. Show these items. Another question Lance...if I check this user's permissions at the root level, should it say "Limited Access"? Because it's telling me they have NO Access at the root level.
    – The Vanilla Thrilla
    Commented Sep 14, 2015 at 12:55
1

This site shows the permissions that should be checked in the Contribute permission level.

Go to permission levels on your Sharepoint account, click on Contribute and make sure that those permissions under Contribute permission level is checked.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.