none
Access Denied when creating a Subsite with a user who has Full Control

    Question

  • Hi Folks. I am looking for a little help here with a problem I am seeing with one of our Sites.

    We have a root level site in a site collection that has a Subsite which we have granted several users "Full Control" permissions over, through a group. When any member of this group attempts to create a new Subsite, he or she gets an "Access Denied" error message. If another user, with Site Collection Administrator role attempts to create the site, it gets created as expected.

    This is an existing site and collection and has been in use for at least a year and we did not have problems like this before.

    When I look in the ULS logs, I am seeing the following reported in our ULS logs. Doe anyone know what might be the problem?

    01/11/2017 12:25:23.08  w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        8e2s Medium Unknown SPRequest error occurred. More information: 0x80070005 a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08  w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        aix9j High SPRequest.UpdateField: UserPrincipalName=i:0).w|s-1-5-21-832980616-969695268-1544898942-48635, AppPrincipalName= ,bstrUrl=http://teamsite.site.com/rco/jetest ,bstrListName={D67956ED-6C4C-4222-91E8-ACF8E9A4EF54} ,bstrXML=<Field Type="LookupMulti" DisplayName="Taxonomy Catch All Column1" StaticName="TaxCatchAllLabel" Name="TaxCatchAllLabel" ID="{8f6b6dd8-9357-4019-8172-966fcd502ed2}" ShowInViewForms="FALSE" List="{e6d0615a-d563-450b-b223-2bcd610a0616}" WebId="2be8cb3d-6a52-445c-8383-6d40b8c5588f" Required="FALSE" Hid a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08  w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        ai1wu Medium System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)), StackTrace:    at Microsoft.SharePoint.SPField.set_SchemaXml(String value)     at Microsoft.SharePoint.SPList.fixFieldShema(SPField fld, String strXml)     at Microsoft.SharePoint.SPList.FixFieldsFromColumnTemplate()     at Microsoft.SharePoint.SPWeb.SyncNewLists(Boolean bCreateFromSTP)     at Microsoft.SharePoint.SPWeb.ApplyWebTemplate(SPWebTemplate webTemplate, Page page, SPFeatureDependencyErrorBehavior featureDependencyErrorBehavior, ICollection`1& featureDependencyErrors)     at Microsoft.SharePoint.ApplicationPages.TemplatePickerUtil.ApplyWebTemplateAndRedirect(SPWeb Web, String strWebTemplate, Nullable`1 bSharedNav, Boolean bOnTopNav, Boolean bOnQuickLaunch, Page page, Boolea... a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08* w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        ai1wu Medium ...n bDeleteOnError, SPFeatureDependencyErrorBehavior featureDependencyErrorBehavior, ICollection`1& featureDependencyErrors)     at Microsoft.SharePoint.ApplicationPages.NewSubwebPage.BtnCreateSubweb_Click(Object sender, EventArgs e)     at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.ProcessRequest()     at System.Web.UI.Page.ProcessRequest(HttpContext context)     at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()     at System.Web.HttpApplicati... a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08* w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        ai1wu Medium ...on.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)     at System.Web.HttpApplication.PipelineStepManager.ResumeSteps(Exception error)     at System.Web.HttpApplication.BeginProcessRequestNotification(HttpContext context, AsyncCallback cb)     at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)     at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& not... a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08* w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        ai1wu Medium ...ificationStatus)     at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags) a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08  w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        ftd0 Medium Access Denied. Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)), StackTrace:   at Microsoft.SharePoint.Library.SPRequestInternalClass.UpdateField(String bstrUrl, String bstrListName, String bstrXML)     at Microsoft.SharePoint.Library.SPRequest.UpdateField(String bstrUrl, String bstrListName, String bstrXML). a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08  w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        88gr Verbose alternateUrl is null a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08  w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          Security                       8gs1 Verbose Access Denied for /rco/_layouts/15/newsbweb.aspx. StackTrace:    at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(HttpContext context)     at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(Exception ex)     at Microsoft.SharePoint.Library.SPRequest.UpdateField(String bstrUrl, String bstrListName, String bstrXML)     at Microsoft.SharePoint.SPField.set_SchemaXml(String value)     at Microsoft.SharePoint.SPList.fixFieldShema(SPField fld, String strXml)     at Microsoft.SharePoint.SPList.FixFieldsFromColumnTemplate()     at Microsoft.SharePoint.SPWeb.SyncNewLists(Boolean bCreateFromSTP)     at Microsoft.SharePoint.SPWeb.ApplyWebTemplate(SPWebTemplate webTemplate, Page page, SPFeatureDependencyErrorBehavior featureDependencyErrorBehavior, ICollection`1& featureDepend... a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08* w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          Security                       8gs1 Verbose ...encyErrors)     at Microsoft.SharePoint.ApplicationPages.TemplatePickerUtil.ApplyWebTemplateAndRedirect(SPWeb Web, String strWebTemplate, Nullable`1 bSharedNav, Boolean bOnTopNav, Boolean bOnQuickLaunch, Page page, Boolean bDeleteOnError, SPFeatureDependencyErrorBehavior featureDependencyErrorBehavior, ICollection`1& featureDependencyErrors)     at Microsoft.SharePoint.ApplicationPages.NewSubwebPage.BtnCreateSubweb_Click(Object sender, EventArgs e)     at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.... a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08* w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          Security                       8gs1 Verbose ...ProcessRequest()     at System.Web.UI.Page.ProcessRequest(HttpContext context)     at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()     at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)     at System.Web.HttpApplication.PipelineStepManager.ResumeSteps(Exception error)     at System.Web.HttpApplication.BeginProcessRequestNotification(HttpContext context, AsyncCallback cb)     at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)     at System.Web.Hosting.PipelineRuntime.ProcessR... a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08* w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          Security                       8gs1 Verbose ...equestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)     at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)     at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags) a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08  w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        c97d Unexpected Exception attempting to ApplyWebTemplate to SPWeb http://teamsite.site.com/rco/jetest: System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))     at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(Exception ex)     at Microsoft.SharePoint.Library.SPRequest.UpdateField(String bstrUrl, String bstrListName, String bstrXML)     at Microsoft.SharePoint.SPField.set_SchemaXml(String value)     at Microsoft.SharePoint.SPList.fixFieldShema(SPField fld, String strXml)     at Microsoft.SharePoint.SPList.FixFieldsFromColumnTemplate()     at Microsoft.SharePoint.SPWeb.SyncNewLists(Boolean bCreateFromSTP)     at Microsoft.SharePoint.SPWeb.ApplyWebTemplate(SPWebTemplate webTemplate, Page page, SPFeatureDependencyErrorBehavior featureDependenc... a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08* w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        c97d Unexpected ...yErrorBehavior, ICollection`1& featureDependencyErrors)     at Microsoft.SharePoint.ApplicationPages.TemplatePickerUtil.ApplyWebTemplateAndRedirect(SPWeb Web, String strWebTemplate, Nullable`1 bSharedNav, Boolean bOnTopNav, Boolean bOnQuickLaunch, Page page, Boolean bDeleteOnError, SPFeatureDependencyErrorBehavior featureDependencyErrorBehavior, ICollection`1& featureDependencyErrors) Attempting to delete the site collection. a812ca9d-7de9-a03a-0317-e7bc9cecf4ef
    01/11/2017 12:25:23.08  w3wp.exe (SP13WEB01:0x260C)         0x33B4 SharePoint Foundation          General                        8e1d High Deleting the web at http://teamsite.site.com/rco/jetest . a812ca9d-7de9-a03a-0317-e7bc9cecf4ef

    Friday, January 13, 2017 3:14 PM

Answers

  • Grace,

    I did eventually find a solution. Sorry for not getting on here to check this in a while.

    Ultimately, we had to open a ticket with Microsoft Support and I worked on this issue with one of the support reps. As it turned out, this was a permissions problem on a hidden list at the Site Collection's root web level. There is a hidden list titled "TaxonomyHiddenList" at the root of the site collection. (http://sitecollectionURL/List/TaxonomyHiddenList)

    The problem was that full permissions were missing for the System/Farm account and we also had to grant read only permissions to "NT AUTHORITY\Authenticated Users". Once this was done, we resolved the problem.

    This actually ended up being the case on a couple site collections and it worked to resolve the problem with both.


    • Marked as answer by JM Estrada Tuesday, April 4, 2017 10:13 PM
    • Edited by JM Estrada Tuesday, April 4, 2017 10:13 PM
    Tuesday, April 4, 2017 10:13 PM

All replies