Custom Permission Levels defined at the root site, loosely based on the OOB Contribute permission level. Below the root site are numerous sub sites with unique permissions assigned. Each sub site has its own group that is assigned this
custom permission level. SSL is not being used.
In some sites, a user with the above mentioned custom permissions can successfully modify content in a content editor web part and save the changes. In other sites, a user with the same permissions immediately receives the message "Cannot save your changes"
when they click OK on the CEWP dialog box (note: they
do not receive the often accompanied "Cannot retrieve properties at this time" message). The same thing occurs when I add a specific test user account to both sites with the same permission level assigned (one site works, the other does not). Both sites
are publishing sites created from the same custom template. The forbidden error results from a failed call to the WebPartPages.asmx web service, specifically at the line xmlhttp.Send(soapData) in ie55up.js library, function SPSoapRequestBuilder.SendSOAPMessage.
View Complete Post