.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
david stephan
Gaurav Pal
Post New Web Links

Permissions assignments in Workflows issue

Posted By:      Posted Date: October 25, 2010    Points: 0   Category :SharePoint

I have used the 3rd party workflow solution from Codeplex for some time now successfully for the actions and conditions which are not provided out of the box by MOSS2k7 Standard, but am now running into issues with the permissions rewriting part of it making permissions hard to enumerate/control.

I basically can assign permissions dynamically to users or groups in the workflow, but they always add a 'limited access' permission at the top level of the list itself and the site for that user or group, even after the permission is removed from the list item using the workflow or set back to 'inherit parent's permissions'. What mechanism do other admins use to ensure that these 'limited access' permissions do not simply build up and increase to include all users in the organisation eventually, other than manual pruning? Would I not hit a limit on how many permission assignments I can add to a list or site eventually?

My scenario is that for a several stage approval process, the business wants the approvers to be sequentially granted contribute access and the author's access made read only after submission, but the approver's cannot belong to a sharepoint group (authoriser could potentially be anyone)  

Sincere thanks in advance to anyone that can advise on this. If it makes any difference, we are just using this on normal custom li

View Complete Post

More Related Resource Links

Permissions issue for custom web service in the _vti_bin folder.

Hello, I have created a custom ASMX webservice that returns in JSON format so that I can call the data from JQuery on SharePoint page content.  I placed it in the ISAPI (_vti_bin) folder and it works just fine when I go directly to the web service and call it the way JQuery calls it: /_vti_bin/ServiceabilityCheck.asmx/GetSystemIDByZIPCode?ipaddress= Which returns: <string>{"SystemID":"5"}</string> When I try to call it from the SharePoint site with JQuery, it errors out and gives an unspecified error.  Fiddler shows {"Message":"Authentication failed.","StackTrace":null,"ExceptionType":"System.InvalidOperationException"} as the response from the web service call. When I have the webservice on an IIS web app outside of SharePoint, it works fine.  I have anonymous access enabled on the SharePoint site, why would it give me this error?John Chapman | Blog: http://www.johnchapman.name

SSRS IIS Permissions issue

SETUP: We have a server that runs SSRS and is also our webserver. Our reports are set up in two ways, one so that everyone can see some of the reports and a few are locked down so only admins and specific users can see and run the reports. These are set on the http://server/reports site under the security task on the report.  Issue: Some bright spark decided to change the permissions in IIS since then users can only see the "one to all reports" and not even admins could see the "locked down" reports. So not knowing much about IIS i tried to get the sites back to how they were by fiddling around with the Anonymous access and the windows authentication  on the properties on the default website, the reports site and the reports server site. I finally managed to get the users access though the reports server site but not the reports site as it has a better interface. I suddenly though of what i thought was a good idea and copped a backup to oversight the files within the sites forgetting that copy paste dosnt overwrite the permissions and now I dont have access to any site. Is there an easy way to set the permissions back to where they were and to get the sites back up.  Thanks

Sharepoint Designer restore issue or perhaps BPOS permissions issue


Trying to use Sharepoint Designer 2007 SP2 to backup and restore site to BPOS. Backup works fine, restore uploads all .cmp files and then comes with an error "Operator does not have web administrator access to import location".

Any ideas ?

Permissions issue with 2008R2


Platform: XP embedded, SP3, .NET 4

Our product is a security appliance.  Previously we used 2005 Express-SP3; we used Windows authentication with the default user "NT AUTHORITY\SYSTEM", and we could attach a database using SQLCMD with no issues.

We want to upgrade to 2008R2 Express.  Installation seems to proceed with no problems, but now the same SQLCMD fails with "CREATE DATABASE permission denied in database 'Master'".

What do we need to do in order to get this to work?  Our XP embedded environment has an automatic logon, and we're still using "NT AUTHORITY\SYSTEM" as the user.

Thanks for your help.



Shared Data Sources permissions issue


I have created a Shared Data source in my Report Manager, granted my network account all the permissions to the connection. I build my report in Report Builder 2.0 (I have access to the necessary tables and views etc). I save my report to the report server. I can run the report through Report Manager, however, I can't run the report through Report Builder 2.0. I get the error:

The permissions granted to user 'domain\myusername' are insufficient for performing this operation. (rsAccessDenied)

The odd thing is, if I create a report with an embedded data source, I can run it through Report Builder 2.0 until I save it to the server. Then I can only run it on the server (same as the Shared Data source), and not through Report Builder 2.0

Anyone have any ideas?

Permissions Issue



    I have received below error message. I have no idea what are the permission we need to give for accessing report server to users.

error 1 :The permissions granted to user 'PRO-CLA05211I\nagpl' are insufficient for performing this operation.                   0                0            

error 2:The permissions granted to user 'PRO-CLA05211I\nagpl' are insufficient for performing this operation. (rsAccessDenied)


Please help me how to solve this problem.





Cell permissions Cell contigent permission issue



What is the difference between the  Cell permissions and Cell contigent permission in the Cell Data  Cube Role designer.

Could you illustrate me and MDX example that treats the issue  

Thank you


The complexity resides in the simplicity

"Issue Tracking" - Permissions Ability



I am wondering if this type of permission setup can be done.  I work at a school district and we are looking at setting up a "Bullying Tracking" system in our district.  I am looking at Sharepoint for this and figured the "Issue Tracking" tool would be perfect.  I have it currently setup how we would like it but it's now a matter of permissions.  I am wondering if within WSS 3.0 or even SharePoint 2010, I can setup the permissions so that teachers can only see the bullying incidents that they've submitted.  We would have our principals and admins setup to see all the incidents but the teachers only seeing what they've submitted.  I am somewhat new to SharePoint but have played around with it a little.  So any suggestions, feedback, answers are welcomed.


Permissions issue when deploying a VB.NET application


I have developed an app in VS 2010 and deployed it on a Windows 2003 server.  Now I'm attempting to deploy it on a Win 2008 R2 server. 

I am getting the following error message:



	Below is a summary of the errors, details of these errors are listed later in the log.

	* Activation of \\Asiapp1\applications\OnlineClaimsImageProcessing\OnlineClaimsImageProcessing.application resulted in exception. Following failure messages were detected:

		+ Configuration system failed to initialize

		+ An error occurred loading a configuration file: Access to the path 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config' is denied. (C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config)

		+ Access to the path 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config' is denied.


This is a VB.Net Console app, NOT an ASP.Net web app. 

What account(s) must have what permissions on the above-referenced machine.config file for this to work?

SharePoint Moss2007 - Permissions for Issue Tracker. Want users to Edit but not Delete


I have a issue tracker list setup and I've got custom permission group which is basically the same as the standard Contribute group except with Delete removed. However using this custom group users don't get the Edit button on the List Items to then be able to go in and change. When I add the delete permission to the group they can then go in - but can then obviously delete which I don't want them to be able to do.

Anyone got a solution for this?


SharePoint 2007 Workflows - Things to Consider Before You Start

SharePoint 2007 (MOSS) utilizes the Workflow Foundation (WF) to enable workflows on lists and content types. But before you start doing cartwheels there are few things you should know before you get started. The experiences I'll be discussing are not from book smarts but from building real MOSS solutions that are in production today.

IsapiModule Error 500 Issue


I am about exhausted trying to figure out this error:

HTTP Error 500.0 - Internal Server Error

Description: The page cannot be displayed because an internal server error has occurred.

Error Code: 0x8007007b

Notification: ExecuteRequestHandler

Module: IsapiModule

Requested URL: http://localhost:80/ReportServer

Physical Path: c:\Program Files\Microsoft SQL Server\MSSQL.2\Reporting Services\ReportServer

When I enable Failed Request Tracing Rules and view the log output I am supposing that the actual problem is in the 2nd call where there are 2 backslashes before the actual filename in the specified path:


CALL_ISAPI_EXTENSION DllName="C:\Windows\Microsoft.NET\Framework\v2.0.50727\\aspnet_isapi.dll"


MVC2 issue - Stuck. Trying to create a cms with nested partials


I am currently trying to display multiple items on a single page. I am not sure as to how to tackle this. What I have is a database table that has all the page data in. I have this run as a PagesController and this works fine. However what I would like to do is, if say the Products page is selected via the menu, I want to pull back not only the Products page html but also get all the products, and even be able to pull them through via category. I was trying to use a partial view, but I can't get it to work. The same would be for other pages, having partial views to display the other content, ie if Gallery is selected, the page html for Gallery shows and it then can push to a partial view that pulls all the gallery images from the gallery db table and so on. 

Maybe I am tackling this the wrong way. I have the pages stored in the db to allow for a CMS system I have setup. Maybe I need to use models for all the other items(Products, Gallery, Videos and such) and use the partial for the page html?

Any help would be greatly appreciated as I am confused.

xpath issue


Hi i am using xpath to loop through each node,

the xml is below i can get the value of "link" but i cant get the thumbnail value, have you got any ideas how i can do this, my code is below.



     <link>test 1</link>
     <media:thumbnail url="http://test.com/image.jpg" height="75" width="75" />



     <link>test 2</link>
     <media:thumbnail url="http://test.com/image.jpg" height="75" width="75" />


public void FindLinks(XPathNavigator p_xPathNav, DataTable dt)
            //run the XPath query
            XPathNodeIterator xPathIt = p_xPathNav.Select("//item");

            //use the

User validation Issue in xlsx file



I am validating user from Login.xlsx file. It was working fine by validating email and password from that file. For testing i got new file same contents of file but added some more user names.

So after that when i validating the user i am getting the following error "Data type mismatch in criteria expression".

But when i replaced the new to old one it is working fine. The contens of both files are the same. So why this kind of error happened.


Multiple Paramatized Threading issue


I need the funcitonality to have two methods run concurrently of each other and the parent thread (aka the method that makes these two calls) to halt until BOTH are done. After the threads are done, I need to perform logic on the returns of the method, so it is essential for both of them to be complete before the parent thread continues. I have searched the internet and tried varous attacks, and I always come up with the same result, this being the parent thread continues operation after the first thread finishes, leaving the second thread running.  Can someone show me a quick example of how I can do this. I have tried checking states of the threads, halting the threads, but I always end up with the same thing. Any help would be great. Thanks.

Data Truncation issue with Enterprise Library Logging WriteLog stored Proc


Hi ,

I'm using Enterprise Library Logging  feature for logging. The issue i am facing is when the Logging message is too large(more than 65534 chars) ,complete data  is not logged in the Formatted Mesage column which is  of data Type nText .

I am able insert complete data if i try inserting from Sql insert Query from sql management studio. Do i need to add any attributes to data base listener or do i need to change the sp.

 Is there any way to increase the WriteLog stored proc param size in EnterpriseLibrary.Logging config file ? . Please let me know.


Thanks In Advance.

ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend