SharePoint Permission Issue with Read and Contribute rights
Hi All, We have a weird issue came up in our Production SharePoint site. An Access Denied issue was encountered by all of the users, here is the overview of the issue. To have an access to the site, the users/AD Group is added in SharePoint group. Actually, we manage (add/remove) the list of users in Active Directory group to make sure that the permission settings of SharePoint Groups are not accidentally modified. These SharePoint groups are granted with READ permission in order to have limitation to the admin pages of the site. Before that, we have custom pages created using ASP.Net and all transactions are passed to these forms that connected to our SQL Database. The permission to the custom forms are defined in SQL Database, permission of a SharePoint group to the custom form (with Read or Edit or Delete permission) is based on the definition in SQL Database and not the permission granted in SharePoint level. Here is the flow of the authentication. Example: SharePoint Group : Telecom_Team Permission : READ Member : TelecomUser (this is an active directory group where user is added) User is a member of the TelecomUser Active Directory group and this AD group is added to Telecom_Team SharePoint group that has a READ permission. The user can access the site since SP group where he/she belongs is granted with READ permission to the site. Once the user navigates to the custom form, On Page load, a method will check on what SharePoint group the current user belongs. If the SP group is identified the SP Group name string “Telecom_Team” will be used to check in SQL Database the permission of that SP Group name to the custom form. In SQL Database: Telecom_Team has READ permission to the form. If the SP Group name exists in SQL DB, the permission settings will be pull and render the page based on the specified permission. As for the example, in backend it has READ permission and then the page will be render in Read-only mode without any buttons to edit or delete the record. ISSUE: Once the user navigates the custom form the access denied issue occurred. I checked the user and he/she belongs to the SharePoint group with READ permission. And there is no changes made on SQL Database permission settings to that SP group name. It’s something weird; there is no installation activity/Changes made in the Web Server, No changes in Codes from the past 2 months and all of the sudden this issue raised. TEMPORARY WORKAROUND: We identify a workaround to temporarily resolve the issue and in order the users accessed the custom forms. We granted the SP groups with FULL CONTROL permission and it allows the user to access the forms and do the search, update of records and adding of records and saving the record to our SQL database. Take note, if the SP Group is granted with both READ and CONTRIBUTE permission, the Access Denied issue is still happen. I am hoping that someone give me an idea what are the possible root cause of this issue. Thanks, Jerry
May 25th, 2010 7:12am

Hi Jerry, What is server authentication of your SQL server? If you were using SQL server authentication mode, try to use Connection String to connect to the SQL database, then check the effect. For more information about How To: Connect to SQL Server Using SQL Authentication in ASP.NET 2.0, please refer to the following article: How To: Connect to SQL Server Using SQL Authentication in ASP.NET 2.0 http://msdn.microsoft.com/en-us/library/ff648340.aspx Hope this helps. Rock WangRock Wang MSFT
Free Windows Admin Tool Kit Click here and download it now
May 26th, 2010 12:48pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics