RE: Permission issues
Make sure it is not a permissions corruption issue. This blog details it: http://www.beyondweblogs.com/post/SharePoint-security-access-denied-permission-corruption-problem-Edit-Item-and-Access-Workflows.aspx Basically the PermMask field is missing the attribute RenderXmlUsingPattern. I have had this many times on projects and the code in the blog fixes it. You can create new items but cannot edit them and lots of the standard options/buttons on the toolbars are 'missing' even when you have a 'god' account. Cheers Paul T. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Wampers, Wilson [Talent International] Sent: Friday, 6 February 2009 4:44 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Hi Paul, I've encountered similar issues when using AD Groups combined with SharePoint Groups. (in a Kerberos environment). This appears to cause functionality loss in particular, Presence, Save-As functionality, Site Membership, and My SharePoint Sites and perhaps elsewhere to? When resorting to Individual AD Accounts assigned to SharePoint Groups there doesn't seem to be any functionality loss. Hope this helps. Kind Regards, Wilson From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 14:01 To: ozmoss@ozmoss.com Subject: RE: Permission issues A bit more digging around seems to point to the Profile Import. Firstly, the scheduled imports aren't running. Neither is the compilation schedule for Audiences. They are set. And there are no errors. They're just not running. The timer service is running but the Timer Job status window is showing very large and consistent gaps. Don't know whether any of this is related but it should probably be seen to. Otherwise the boxes are pretty well up-to-date. Users are running IE6 or IE7. I'll just keep digging. No doubt the problem will resolve itself before I find the cause... From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 2:06 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Thanks guys, I'll check out all those avenues first. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Jeremy Thake Sent: Friday, 6 February 2009 2:03 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues I have seen this before intermittently and it was an issue with the Domain Controller and Kerberos configuration at server level. But also, are you patched up to the latest patches for SharePoint (December 2008 Cumulative Update)? It could possibly be a: * Server caching issue? * Client browser caching issue? * Are you in a farm environment and propagation isn't work properly to web front end servers? From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, February 06, 2009 11:57 AM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click request access and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com
RE: Permission issues
Hi Wilson/Paul, I've already run into the issue with SharePoint being unable to get presence, membership and My SharePoint Sites when using AD groups. I'm confident that someone will address this oversight in the next version. To get around this I was obliged to add users individually for department Team Sites. But there's simply no way I can do this manually at an Intranet level with staff from over 140 schools needing to be categorised. I don't suppose you could automate/update these through scripting? I also encountered the missing toolbar items but only on top-level publishing sites, not with permission groups. I overcame this by setting the creator for all master and layout page files to an existing system account. None of it seems to explain why the timer jobs have stopped running. Regards, Paul Online Developer, ICT CEO Sydney From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Turner Sent: Sunday, 8 February 2009 9:15 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Make sure it is not a permissions corruption issue. This blog details it: http://www.beyondweblogs.com/post/SharePoint-security-access-denied-permission-corruption-problem-Edit-Item-and-Access-Workflows.aspx Basically the PermMask field is missing the attribute RenderXmlUsingPattern. I have had this many times on projects and the code in the blog fixes it. You can create new items but cannot edit them and lots of the standard options/buttons on the toolbars are 'missing' even when you have a 'god' account. Cheers Paul T. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Wampers, Wilson [Talent International] Sent: Friday, 6 February 2009 4:44 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Hi Paul, I've encountered similar issues when using AD Groups combined with SharePoint Groups. (in a Kerberos environment). This appears to cause functionality loss in particular, Presence, Save-As functionality, Site Membership, and My SharePoint Sites and perhaps elsewhere to? When resorting to Individual AD Accounts assigned to SharePoint Groups there doesn't seem to be any functionality loss. Hope this helps. Kind Regards, Wilson From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 14:01 To: ozmoss@ozmoss.com Subject: RE: Permission issues A bit more digging around seems to point to the Profile Import. Firstly, the scheduled imports aren't running. Neither is the compilation schedule for Audiences. They are set. And there are no errors. They're just not running. The timer service is running but the Timer Job status window is showing very large and consistent gaps. Don't know whether any of this is related but it should probably be seen to. Otherwise the boxes are pretty well up-to-date. Users are running IE6 or IE7. I'll just keep digging. No doubt the problem will resolve itself before I find the cause... From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 2:06 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Thanks guys, I'll check out all those avenues first. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Jeremy Thake Sent: Friday, 6 February 2009 2:03 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues I have seen this before intermittently and it was an issue with the Domain Controller and Kerberos configuration at server level. But also, are you patched up to the latest patches for SharePoint (December 2008 Cumulative Update)? It could possibly be a: * Server caching issue? * Client browser caching issue? * Are you in a farm environment and propagation isn't work properly to web front end servers? From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, February 06, 2009 11:57 AM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click request access and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul
RE: Permission issues
I have seen this before intermittently and it was an issue with the Domain Controller and Kerberos configuration at server level. But also, are you patched up to the latest patches for SharePoint (December 2008 Cumulative Update)? It could possibly be a: * Server caching issue? * Client browser caching issue? * Are you in a farm environment and propagation isn't work properly to web front end servers? From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, February 06, 2009 11:57 AM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click request access and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: http://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists
RE: Permission issues [SEC=UNCLASSIFIED]
Are they also load balanced? It could be a server caching issue. Fadi From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, February 06, 2009 11:57 AM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click request access and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists http://www.codify.com/lists Support procedure: http://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists
RE: Permission issues
I don't think the ViewFormPagesLockDown feature is to blame here, that is only going to affect anonymous users from what I know of it, so if your user is authenticated and logged in then there won't be any dramas at all. The easy way to verify that though would be to see if they can create a list item somewhere in the same site, if they can then there is definately nothing going on with that feature. Is there anything in the 12 log to indicate what else could be going wrong there? Brian Farnhill Consultant Technical Consulting Direct: 02 6225 4307 Main: 02 6225 4333 Mobile: 0408 289 303 Fax: 02 6225 4334 Email:brian.farnh...@uniqueworld.netmailto:brian.farnh...@uniqueworld.net Web: www.uniqueworld.nethttp://www.uniqueworld.net Blog: pointstoshare.spaces.live.comhttp://pointstoshare.spaces.live.com/ Microsoft Certified Application Developer From: ozmoss@ozmoss.com [ozm...@ozmoss.com] On Behalf Of Paul Noone [paul.no...@ceosyd.catholic.edu.au] Sent: Friday, 6 February 2009 1:57 PM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We’re getting permission and authentication issues (again) which I’m hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click “request access” and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It’s driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: http://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists
RE: Permission issues [SEC=UNCLASSIFIED]
I also had that issue, but mine was cause by IE8 beta. What browser are they using? From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Brian Farnhill Sent: Friday, 6 February 2009 2:05 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues I don't think the ViewFormPagesLockDown feature is to blame here, that is only going to affect anonymous users from what I know of it, so if your user is authenticated and logged in then there won't be any dramas at all. The easy way to verify that though would be to see if they can create a list item somewhere in the same site, if they can then there is definately nothing going on with that feature. Is there anything in the 12 log to indicate what else could be going wrong there? Brian Farnhill Consultant Technical Consulting Direct: 02 6225 4307 Main: 02 6225 4333 Mobile: 0408 289 303 Fax: 02 6225 4334 Email:brian.farnh...@uniqueworld.net mailto:brian.farnh...@uniqueworld.net Web: www.uniqueworld.net http://www.uniqueworld.net Blog: pointstoshare.spaces.live.com http://pointstoshare.spaces.live.com/ Microsoft Certified Application Developer From: ozmoss@ozmoss.com [ozm...@ozmoss.com] On Behalf Of Paul Noone [paul.no...@ceosyd.catholic.edu.au] Sent: Friday, 6 February 2009 1:57 PM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click request access and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists http://www.codify.com/lists Support procedure: http://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists
RE: Permission issues
Thanks guys, I'll check out all those avenues first. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Jeremy Thake Sent: Friday, 6 February 2009 2:03 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues I have seen this before intermittently and it was an issue with the Domain Controller and Kerberos configuration at server level. But also, are you patched up to the latest patches for SharePoint (December 2008 Cumulative Update)? It could possibly be a: * Server caching issue? * Client browser caching issue? * Are you in a farm environment and propagation isn't work properly to web front end servers? From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, February 06, 2009 11:57 AM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click request access and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: http://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists
RE: Permission issues
A bit more digging around seems to point to the Profile Import. Firstly, the scheduled imports aren't running. Neither is the compilation schedule for Audiences. They are set. And there are no errors. They're just not running. The timer service is running but the Timer Job status window is showing very large and consistent gaps. Don't know whether any of this is related but it should probably be seen to. Otherwise the boxes are pretty well up-to-date. Users are running IE6 or IE7. I'll just keep digging. No doubt the problem will resolve itself before I find the cause... From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 2:06 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Thanks guys, I'll check out all those avenues first. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Jeremy Thake Sent: Friday, 6 February 2009 2:03 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues I have seen this before intermittently and it was an issue with the Domain Controller and Kerberos configuration at server level. But also, are you patched up to the latest patches for SharePoint (December 2008 Cumulative Update)? It could possibly be a: * Server caching issue? * Client browser caching issue? * Are you in a farm environment and propagation isn't work properly to web front end servers? From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, February 06, 2009 11:57 AM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click request access and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists Support procedure: http://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists
RE: Permission issues
Hi Paul, I've encountered similar issues when using AD Groups combined with SharePoint Groups. (in a Kerberos environment). This appears to cause functionality loss in particular, Presence, Save-As functionality, Site Membership, and My SharePoint Sites and perhaps elsewhere to? When resorting to Individual AD Accounts assigned to SharePoint Groups there doesn't seem to be any functionality loss. Hope this helps. Kind Regards, Wilson From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 14:01 To: ozmoss@ozmoss.com Subject: RE: Permission issues A bit more digging around seems to point to the Profile Import. Firstly, the scheduled imports aren't running. Neither is the compilation schedule for Audiences. They are set. And there are no errors. They're just not running. The timer service is running but the Timer Job status window is showing very large and consistent gaps. Don't know whether any of this is related but it should probably be seen to. Otherwise the boxes are pretty well up-to-date. Users are running IE6 or IE7. I'll just keep digging. No doubt the problem will resolve itself before I find the cause... From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 2:06 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Thanks guys, I'll check out all those avenues first. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Jeremy Thake Sent: Friday, 6 February 2009 2:03 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues I have seen this before intermittently and it was an issue with the Domain Controller and Kerberos configuration at server level. But also, are you patched up to the latest patches for SharePoint (December 2008 Cumulative Update)? It could possibly be a: * Server caching issue? * Client browser caching issue? * Are you in a farm environment and propagation isn't work properly to web front end servers? From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, February 06, 2009 11:57 AM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click request access and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists http://www.codify.com/lists Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists http://www.codify.com/lists Support procedure: http://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com
