User permission Problem for workflows in wss-3.0

Question

Im running wss-3.0 on a Windows Server 2003 machine. The User Accounts are AD based.

I made a Calendar List with 3 different Permission Groups.

1. Users that can only read the list

2. Users that can add new Items and edit only the items they added themselves

3. Users that can edit/delete all items.

I created a SPD workflow for that list which should fire an email to all Persons named in a Persons/Group column everytime a item is created. This works without problems for Users in Group 3. But for Users in Group 2 nothing happens after the item is created. The Workflow history shows me an "Access Denied" error for that workflow everytime a group 2 user creates an item.

After seeing the error message, i tried upgrading group 2 to "Contibute" Permission level. It worked, emails are being sent. But the problem is, that the users in group 2 should not be able to edit/delete the listitems other people created.

The workflow history shows that the user for the workflow that got the "Access Denied" was the System Account which should have enough permissions.

Is there any way of not giving users "Contribute" permissions and still let workflows activate when those users create a new item on this list?

Answer 1

Why Dont you use Event Receiver feature instead of Workflow, I mean you can create a event receiver so that when a new item is added to the list, send email to groups/users you want, you can directly access Active Directory to get groups and then Users.

tutorial on Item adding feature

get-the-groups-of-a-user-in-active-directory-c-asp-net