Symptoms

When a user opens a SharePoint integrated SmartForm, the see the following error: Access denied. You do not have permission to perform this action or access this resources. Failed to initialize the Context: URL: SP_SubsiteURL] Username: Correlation ID: GUID] Details: SharePointService.InitializeContext.
 

Diagnoses

We discovered that the users trying to open a SmartForm on the sub-site, did not have any rights on the top-level site. When giving the user read rights on the top-level site, they were able to open the forms without problem. This is a security flaw, because you might not want to give those users rights on the top-level site to access a sub-site.
 

Resolution

The ticket was routed to LABS and a cold-fix was provided. After applying the cold-fix to the client environment, even without having rights on the top level site, the users were able to open the forms on the sub-site without problem. This fix is available for Appit 1.4 and blackpearl 4.6.11 and should be included in an official build at a later stage. If you run into this problem on 4.6.10 or 4.6.11, please contact K2 support and request the fix.