2

We have an Audit site and within that we have a Findings subsite. There is a group with contributor access to this subsite called Findings Contributors, and they do NOT have access to the main site.

For some strange reason, they're unable to access the subsite. Does anyone know why this group might not be able to access the subsite?

Access Denied. Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)), StackTrace: at Microsoft.SharePoint.Library.SPRequestInternalClass.GetListsWithCallback(String bstrUrl, Guid foreignWebId, String bstrListInternalName, Int32 dwBaseType, Int32 dwBaseTypeAlt, Int32 dwServerTemplate, UInt32 dwGetListFlags, UInt32 dwListFilterFlags, Boolean bPrefetchMetaData, Boolean bSecurityTrimmed, Boolean bGetSecurityData, Boolean bPrefetchRelatedFields, ISP2DSafeArrayWriter p2DWriter, Int32& plRecycleBinCount) at Microsoft.SharePoint.Library.SPRequest.GetListsWithCallback(String bstrUrl, Guid foreignWebId, String bstrListInternalName, Int32 dwBaseType, Int32 dwBaseTypeAlt, Int32 dwServerTemplate, UInt32 dwGetListFlags, UInt32 dwListFilterFlags, Boolean bPrefetchMetaData, Boolean bSecurityTrimmed, Boolean bGetSecurityData, Boolean bPrefetchRelatedFields, ISP2DSafeArrayWriter p2DWriter, Int32& plRecycleBinCount). f7f92c9d-b400-6057-49ef-a8b3f8d19374

  • On the subsite did you break permission inheritance? – Amit Kotha Sep 11 '15 at 18:15
  • is this a migrated site? if so check if the user names are converted to Claims. User names should start like "i:0#.w|domain\user" instead of "domain\user" – Aslan Sep 11 '15 at 18:15
  • Yes, the subsite has unique permissions and we recently upgraded our environment from 2010 to 2013. However, I'm unable to confirm if these permissions worked correctly in 2010. – The Vanilla Thrilla Sep 11 '15 at 18:15
  • Can you try with this tool what is happening in the ULS log? sharepointlogviewer.codeplex.com (look for the keyword access denied) – Amit Kotha Sep 11 '15 at 18:22
  • Do you know of a way I can narrow it down more? – The Vanilla Thrilla Sep 11 '15 at 18:34
1

Make sure they still have "Limited Access" permission in the root site. This should be assigned automatically by SharePoint but something to check.

what is limited access?

In SP2013 you won't see Limited Access on the permission pages. The Sharegate article above says you will see this message but I have not been able to get that to work:

"There are limited access users on this site. Users may have limited access if an item or document under the site has been shared with them”.

Instead, you can use Powershell to verify that Limited Access is being granted as expected.

$web = Get-SPWeb <web url>
$web.RoleAssignments | ft Member,RoleDefinitionBindings

If you don't see the permissions you expect, I would try removing the permissions and reassign them in the subsite. This should make SharePoint grant limited access at the root. I've tested this in my environment. I have a list with broken inheritance. When I assign a user permissions to this list, that user is granted Limited Access at the root.

  • How can I check this? I'm at the site collection level, but I don't see "Limited Access" listed under the different permission groups? – The Vanilla Thrilla Sep 11 '15 at 20:16
  • I've updated my answer with more details. – Lance Sep 11 '15 at 20:30
  • I'm not seeing this message. On the sub-sites permissions page, all I see is This web site has unique permissions. I'm worried that SharePoint is failing to automatically give the necessary Limited Access permissions. – The Vanilla Thrilla Sep 14 '15 at 12:38
  • The message would appear at the root. – Lance Sep 14 '15 at 12:44
  • It says, Some content on this site has different permissions from what you see here. Show these items. Another question Lance...if I check this user's permissions at the root level, should it say "Limited Access"? Because it's telling me they have NO Access at the root level. – The Vanilla Thrilla Sep 14 '15 at 12:55
1

This site shows the permissions that should be checked in the Contribute permission level.

Go to permission levels on your Sharepoint account, click on Contribute and make sure that those permissions under Contribute permission level is checked.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.