AnsweredAssumed Answered

Access Denied when publishing workflow on a subsite with Full Control

Question asked by kjcole on Apr 1, 2015
Latest reply on Aug 31, 2015 by andrewg@intellinet.com

My user's are experiencing the following error:

 

Access Denied. Exception: Attempted to perform an unauthorized operation., StackTrace: 

at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(Exception ex)   

at Microsoft.SharePoint.SPSecurableObject.CheckPermissions(SPBasePermissions permissionMask)   

at Microsoft.SharePoint.SPFieldCollection.AddFieldToWeb(String strXml, Boolean checkDisplayName, Boolean isMigration, Boolean ignoreExistsError, Guid featureId, Guid solutionId)   

at Microsoft.SharePoint.SPFieldCollection.AddFieldAsXmlInternal(String schemaXml, Boolean addToDefaultView, SPAddFieldOptions op, Boolean isMigration, Boolean fResetCTCol)   

at Microsoft.SharePoint.SPFieldCollection.AddFieldAsXmlInternal(String schemaXml, Boolean addToDefaultView, SPAddFieldOptions op)   

at Nintex.Workflow.Common.NWSharePointObjects.UpgradeWorkflowContentType(SPWeb web)   

at Nintex.Workflow.WorkflowRepository.UpgradeForUpdatedContentType()   

at Nintex.Workflow.WorkflowType.GetWorkflowRepository(SPWeb web)   

at Nintex.Workflow.ApplicationPages.WorkflowGallery.Page_Load(Object sender, EventArgs e)   

at System.EventHandler.Invoke(Object sender, EventArgs e)   

at Microsoft.SharePoint.WebControls.UnsecuredLayoutsPageBase.OnLoad(EventArgs e)   

at Microsoft.SharePoint.WebControls.LayoutsPageBase.OnLoad(EventArgs e)   

at Nintex.Workflow.ServerControls.NintexLayoutsBase.OnLoad(EventArgs e)   

at System.Web.UI.Control.LoadRecursive()   

at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)   

at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)   

at System.Web.UI.Page.ProcessRequest()   

at System.Web.UI.Page.ProcessRequest(HttpContext context)   

at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()   

at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)   

at System.Web.HttpApplication.PipelineStepManager.ResumeSteps(Exception error)   

at System.Web.HttpApplication.BeginProcessRequestNotification(HttpContext context, AsyncCallback cb)   

at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context)   

at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)   

at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)   

at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)   

at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)   

at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)   

at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)  .

As well:

Permission check failed. asking for 0x800, have 0xb008431061

 

Redirected to the access denied page:

 

Name=Request (GET:http://teamsites:80/sites/training/Nintex/_layouts/15/AccessDenied.aspx?Source=http%3A%2F%2Fteamsites%2Fsites%2Ftraining%2FNintex%2F%5Flayouts%2F15%2FNintexWorkflow%2FWorkflowGallery%2Easpx%3FListId%3D%7Bd89f0e07%2Db9ae%2D4b4f%2Da9a3%2D0988fb6b914d%7D%26AjaxDelta%3D1%26isStartPlt1%3D1427902333358&AjaxDelta=1)

 

The nintex interface displays:

401: Unauthorized

 

 

The user has Full Control on the http://teamsites/sites/training/Nintex site but only has visitor at http://teamsites/sites/training.

 

http://teamsites/sites/training  is a site collection

 

This is a pretty straight forward out of the box setup.

 

We have also disabled the "Limited-access user permission lockdown mode" feature.

Outcomes