GetSubwebsForCurrentUser throws 401

Question

I am trying to get a list of subsites that are accessible to the user. I was initially using,

var query = context.Web.Webs.OrderBy(x => x.ServerRelativeUrl)
var sites = context.LoadQuery(query);
clientContext.ExecuteQuery()

But I was getting UnauthorizedException. So I tried using the GetSubwebsForCurrentUser,

WebCollection webs = clientContext.Web.GetSubwebsForCurrentUser(null);
clientContext.Load(webs);
clientContext.ExecuteQuery();

However, here as well I am getting an Unauthorized Exception. Why am I getting an Unauthorized when GetSubwebsForCurrentUser should only return sites where current user has access?

Am I doing something wrong? Is there another way to achieve this?

Full Code:

    IEnumerable<Web> GetAllWebs(String username, String password, String url)
    {
        using (ClientContext clientContext = new ClientContext(url))
        {
            SecureString passWord = new SecureString();

            foreach (char c in password.ToCharArray()) passWord.AppendChar(c);

            clientContext.Credentials = new SharePointOnlineCredentials(username, passWord);

            Web web = clientContext.Web;

            clientContext.Load(web);

            clientContext.ExecuteQuery();

            Console.WriteLine(web.Title);


            WebCollection webs = clientContext.Web.GetSubwebsForCurrentUser(null);
            clientContext.Load(webs);
            clientContext.ExecuteQuery();

            return webs;
        }
    }

Answer 1

I can't really comment (rep) and I don't have a real solution unfortunately, but I was recently having similar issues with my workflow.

Unauthorised Error Creating Sub Site with Workflow

I really found that there was little value to be had from the error responses. I got bad request for the incorrect URL call, but I got a 401 response as soon as any parameter was out of place anywhere.

All I can say is that the 401 Unauthorized error is not necessarily related to permissions as much as the action of the code itself is not permitted, so I would read it more like a runtime error.

Answer 2

Have modified/fixed your code and changed couple of things:

1) Added passWord inside foreach loop. Currently, its outside

2) Also added AuthenticationMode and set it to default.

3) Added method to check whether user is present in the site collection by using EnsureUser method.

Please try with the below code:

IEnumerable<Web> GetAllWebs(String username, String password, String url)
{
    using (ClientContext clientContext = new ClientContext(url))
    {
        SecureString passWord = new SecureString();

        foreach (char c in password.ToCharArray())
        {
            passWord.AppendChar(c);
        }

        clientContext.Credentials = new SharePointOnlineCredentials(username, passWord);
        clientContext.AuthenticationMode = ClientAuthenticationMode.Default;

        var rootWeb = clientContext.Site.RootWeb;
        var ensureUser = rootWeb.EnsureUser(userName);
        clientContext.Load(ensureUser);
        clientContext.ExecuteQuery();

        Web web = clientContext.Web;

        clientContext.Load(web);

        clientContext.ExecuteQuery();

        Console.WriteLine(web.Title);

        WebCollection webs = clientContext.Web.GetSubwebsForCurrentUser(null);
        clientContext.Load(webs);
        clientContext.ExecuteQuery();

        return webs;
    }
}