Access Denied when re-saving a submitted form

I had this very similar incident today. I found out the problem too.

We have a list where users can Contribute. Once the workflow runs it removes permissions for items and then reset based on list metadata at submission. For the next person to come along and do their bit and re-save etc.

We also had enabled Item-Level permissions for the list (Advanced Settings), Had "Read all items" enabled and "Create items and edit items that were created by the user" enabled.

Item-level Permissions Specify which items users can read and edit. Note: Users with the Cancel Checkout permission can read and edit all items. Learn about managing permission settings.

Read access:   Specify which items users are allowed to read Read all items Read items that were created by the user Create and Edit access:   Specify which items users are allowed to create and edit Create and edit all items Create items and edit items that were created by the user None

So the workflow runs, sets the permissions, the next person has Design access so can see and Edit the item. But at the time of saving the item. The user gets access denied on the list.

Turns out with Item-Level permissions enabled for Create and Edit access enabled.

At the List Level - The second user doing the re-saving requires the following right.

Now if your setting permissions at Item level. The second user has sufficient access (Design has Override List Behaviors right) for the item but not at the list level.

So the fix is to disable Item Level permissions in Advanced Settings as it's not required as your customising permissions at Item Level with the workflow. Users can then re-save providing they have access to. Or you can grant the "Override List Behaviors" right to the person(s) doing the saving second time around that isn't the Creator at the List Level.