locked
Site Permissions not working on production server RRS feed

  • Question

  • Hi All,

    we have an MOSS 2007 environment on production server. we have created sharepoint user group named "Home Visitors" having "Read" permission on Site collection level, site level and subsite level. All the "NT Authority\Authenticated users" are member of "Home Visitors" Group. But when any user tries to access the site collection, he is able to access home page but not the site and subsites and it poses "Access Denied" error. However, when we add "NT Authority\Authenticated users" to the "Home Members" group (having "Contribute" Acess on all the sites and site collection level),all the sites are accessible to the users with Site Actions" visible with Contribute permission which is not desirable in our scenario on production server. What could be the reason the group named "Home Visitors" having "Read" Acccess is getting "Aceess Denied" error on all subsites but not on the home page of the site collection.

    Thanks and Regards,

    Amreesh Sharma

    Moderator Note: I have in an earlier recent post from you already warned you not to use words like asap, urgent and immediate in your posts. Continue doing so and your posts will be deleted.

    • Edited by Mike Walsh FIN Thursday, December 23, 2010 12:26 PM Moderator Note added.
    Thursday, December 23, 2010 12:17 PM

Answers

  • Hi Amreesh,

    Sorry for the delay.

    Do you get Access Denied when go to the sub site by click the top navigation bar?

    If so, please check the group’s permission for the master page you use in that site (Site Action > Site Settings >Modify All site settings > Master pages and page layouts under Galleries).

    Hope this can help.


    Best regards. Emir
    • Marked as answer by Lily Wu Thursday, January 6, 2011 8:58 AM
    Wednesday, December 29, 2010 11:36 AM

All replies

  • Hi Amreesh,

    Try to disable lockdownmode. If your lockdown feature is on, users with read access can not see application pages. so when they try to open an application page like http://sitename/lists/aList/allitems.aspx sharepoint avoid the user. Check this site: http://technet.microsoft.com/en-us/library/cc263468(office.12).aspx

    And as an advice: it is not a good idea to assign all authenticated users as contributer. but if you have to, you can also hide "Site actions" menu with securitytrimmed control like:

    <Sharepoint:SPSecurityTrimmedControl runat=”server” Permissions=”ManageWeb”> Site Actions Menu here </SharePoint:SPSecurityTrimmedControl>. 

    It tells, nobody except users has "manageweb" permission, can see the site actions menu.

    But it will cause many problems like unauthorized peaple can edit items. So do not use this method.

     


    Caglar Ozkul
    Thursday, December 23, 2010 1:23 PM
  • Hi caqlar,

    I tried with the stsadm command to disable the lockdown mode, but i am facing the same access denied error. Actually the problem is not the application pages but with the site's home pages and subsites under these sites in the Action menu. We have the hierarchy of the users in our deployment, so caanot give contribute to all the users. The same sites and subsites in the pre-production server are accessible by "Home Visitors" group having "Read" permission. Hope you have got my point. Any other ideas......will be highly appreciable.

    Thanks

    Amreesh Sharma

    Thursday, December 23, 2010 2:15 PM
  • Hi Amreesh,

    Sorry for the delay.

    Do you get Access Denied when go to the sub site by click the top navigation bar?

    If so, please check the group’s permission for the master page you use in that site (Site Action > Site Settings >Modify All site settings > Master pages and page layouts under Galleries).

    Hope this can help.


    Best regards. Emir
    • Marked as answer by Lily Wu Thursday, January 6, 2011 8:58 AM
    Wednesday, December 29, 2010 11:36 AM