Custom permission levels don't work

I have created a custom permission level group called custom contribute. The group permission seems to work fine and smoothly one day. The next day that it seems that users of the group can access the site but they cannot do anything else on the site without
receiving the tell us why you need access message.
The users in the group are accessing SharePoint from all over the world. Is there something that I can check within the settings  to see why they have access one day and the next they don't? Or is SharePoint setup this way?
I have full control of the site and nothing changes from day to day. Any help or suggestions on this would be greatly appreciated.

Hi kedge11,
Please check permissions for the users with this custom permission level from problematic SharePoint site, verify if they still have the expected custom contribute permissions.
Also test if this issue could be reproduced, if not, please re-create another same custom permissions for these users again.
If issue still persists, please check ULS log when this error occurs, it should provide some useful information for helping solve issue.
Thanks
Daniel Yang
TechNet Community Support

Similar Messages

  • Custom Permission Level Contribute No Delete not working

    I have created a custom permission level that is the same as OOTB Contribute, except it doesn't have the Delete Items nor Delete Versions.
    In my document libraries, I have "require documents to be checked out" set to Yes.
    This is causing some strange behaviour.  When a user (that has my custom Contribute No Delete permission) tries to open a document for editing, they get a message that the document is checked out to their own username, and it won't allow
    them to edit the document.
    What is the best way to remove the "Delete" permission?  We absolutely need this.
    thanks!

    Are you given an option to check it back in via the "back-stage" area? 
    I'd also say that the highest permission grouping wins.  If one group grants a right and another removes it, the additive grouping will win out.  As well as checking the inheritance, it's ideal to remove permissions that might grant this.
    Steven Andrews
    SharePoint Business Analyst: LiveNation Entertainment
    Blog: baron72.wordpress.com
    Twitter: Follow @backpackerd00d
    My Wiki Articles:
    CodePlex Corner Series
    Please remember to mark your question as "answered" if this solves (or helps) your problem.

  • Check if Custom Permission level exists or not

    I have cretaed a custom permission level.
    On feature activation, i need to check if that custom permission level exists or not. How can i do that?
    Thanks,
    Avni Bhatt

    Check if below helps
    SPWeb web = SPContext.Current.Web;
    // Validate the page request to avoid
    // any malicious posts
    if (Request.HttpMethod == “POST”)
       SPUtility.ValidateFormDigest();
    // Get a reference the roles that are
    // bound to the current user and the role
    // definition to which we need to verify
    // the user against
    SPRoleDefinitionBindingCollection usersRoles = web.AllRolesForCurrentUser;
    SPRoleDefinitionCollection roleDefinitions = web.RoleDefinitions;
    SPRoleDefinition roleDefinition = roleDefinitions["Full Control"];
    // Check if the user is in the role. If not
    // redirect the user to the access denied page
    if (usersRoles.Contains(roleDefinition))
       //Check if post back to run
       //code that initiates the page
       if (IsPostBack != true)
        //Do your stuff here
    else
       Response.Redirect(“/_layouts/accessdenied.aspx”);
    http://blog.rafelo.com/2008/10/13/programmatically-checking-user-roles-or-permission-levels-in-sharepoint-2007/
    http://yoursandmyideas.wordpress.com/2011/10/08/setting-custom-permission-levels-in-sharepoint-programmatically/
    Or check if it exist and then delete and recreate it
    string[] yourCustomRoles = {"Level1", "Level2"};
    using (var web = spSite.OpenWeb())
    var roles = web.RoleDefinitions;
    foreach(var levelName in yourCustomRoles)
    try
    roles[levelName];
    roles.Delete(levelName);
    catch(Exception)
    // web has no this role
    //Add code here
    http://go4answers.webhost4life.com/Example/delete-specific-permissions-108626.aspx

  • Custom Split views don't work like the use to pre- Project 2010

    Hi
    Either we've lost some functionality along the way, or there must be another way of doing the following...
    Up until and including version 2007, I was able to create multiple custom split views in a file (or global.mpt) where the I could specify a different Task Form (e.g., "Predecessors & Successors" or the "Work") depending on which custom
    split view I selected.
    In 2010 and 2013, you have to manually select the Task From you want; the custom split view won't can help you get the specific Task Form you want ((e.g., "Predecessors & Successors", "Work").  At least that has been my experience...
    does anyone have a solution apart from needing to write a VBA event handler?
    Thanks in advance,
    \Spiro Theopoulos PMP, MCITP. Montreal, QC (Canada)

    I agree with Dale. Project remembers the last set of details applied in form views such as Task Form. Using VBA event handlers you can change this behavior.
    1. Open the project file on which this change should be applied.
    2. In the View ribbon, click Macro command and select Visual Basic
    3. If you want the details displayed in the Task Form to be applied to the current file, double click "ThisProject" node under the VBAProject(your file name) or else double click "ThisProject" node under ProjectGlobal (Global.MPT)
    4. Paste below lines in the Project_Open event handler. Save the code.
    Private Sub Project_Open(ByVal pj As Project)
        ViewApplyEx ApplyTo:=1, BuiltInView:=pjViewTaskForm
        WindowActivate TopPane:=False
        ViewShowPredecessorsSuccessors
    End Sub
    5. You can replace the last statement ViewShowPredecessorsSuccessors with another statement that is compatible with Task Form view
    Sai PMP, PMI-SP, MCTS Project, MVP Project

  • Regarding creating SharePoint custom permissions not permission level

    Hi All,
    i want to create or manage custom permissions under permission level.
    like
    for list items Manage Lists and add items etc.
    Thanks in advance.
    Kindly suggest me some suggestion
    Varsha Patil

    Use SPSecurityTrimmedControl control to for specific users or group. But still SPSecurityTrimmedControl will not work for full control so you also need to customize permission for full controls users.
    First go to permission level page and modify the permission for full control. uncheck the permission for whom you don't want to show this control (refer below link to know about base permission)
    http://msdn.microsoft.com/en-us/library/microsoft.sharepoint.spbasepermissions.aspx
    Then do the same for custom permission level. and now assign this custom permission to group. Later use  SPSecurityTrimmedControl in above menu and then hide/show control for users.
    http://social.technet.microsoft.com/Forums/en-US/9496525a-3f8f-47e3-a3c0-73d9a1670b0d/how-to-make-the-site-actions-menu-invisible-to-certain-users?forum=sharepointgenerallegacy
    http://social.msdn.microsoft.com/Forums/en-US/0dba2a60-204d-44d9-968f-84cd41f52e2d/how-to-hide-site-actions-menu-for-user-group?forum=sharepointcustomizationlegacy
    Hemendra:Yesterday is just a memory,Tomorrow we may never see
    Please remember to mark the replies as answers if they help and unmark them if they provide no help

  • Lock a custom site permission level

    Hello,
    In SharePoint 2013 I have created a custom permission level called Site Owner.  It was modeled off the Full Control level and basically I just wanted to remove the "Create Subsites" permission.
    Now our site owners should still be able to modify/add/edt permissions to the site - but I don't want them to be able to create their own custom permission levels or to modify existing ones (like the one I created so that they could then create subsites).
    I've tried to remove the Manage Permissions and the Enumerate Permissions but then they can't do any permission changes.
    Is it possible have a user be able to edit site/list/etc permissions but not edit Site permissions levels?
    Thanks!
    Ruby

    Hi  Ruby,
    According to your description, my understanding is that you want to restrict your users editing Site permissions levels  but remain them editing site/list/etc permissions .
    As far as I know, it is infeasible by OOTB . For a workaround, you can remove the “Create Subsites” permission in your Web Application:
    Go to your Central Administration -> Application Management -> Manage web applications.
    Select your Web Application, click  “User Permissions”.
    Uncheck “Create Subsites” Permission and Save.
    Thanks,
    Eric
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support,
    contact [email protected]
    Eric Tao
    TechNet Community Support

  • Levels no longer work in Photoshop CS5.1

    Levels don't work in my installation of CS 5.1. The dialog comes up but adjustment don't change the image. I reinstalled CS 5.1 but that didn't fix things. Any ideas on what I can do?
    thanks

    OMG - preview was unchecked, as was my attention. Thanks for that. I never conciously uncheck preview in any dialog and have assumed over the years that it was the  default mode. Lesson learnt...

  • Permission Level

    I have custom permission level, however I need to break the permission from the parent site and set a custom permission for this sub site. Please advice detail instructions on how to do this without breaking the parent site permission level.
    Renee W

    Hi
    check this similar post
    https://social.msdn.microsoft.com/Forums/ro-RO/83bf0883-986e-4881-8470-9e012624bc05/custom-permission-levels-subsite-access-global-navigation-and-webpart-permissions-configuration?forum=sharepointadminlegacy
    Romeo Donca, Orange Romania (MCSE, MCITP, CCNA) Please Mark As Answer if my post solves your problem or Vote As Helpful if the post has been helpful for you.

  • Second Level Subdomains | wildcard domains on Azure don't work as expected

    Hi,
    We're having issues with the Custom Domain functionality of Azure Websites.
    In short, a wildcard CNAME record has been set up to point to the Azure Website instance:
    *.mydomain.com -> mydomain.azurewebsites.com
    In Azure portal, in the custom domains section, the wildcard is also set up with a valid entry
    e.g. *.mydomain.com (record in custom domains section).
    Problem:
    visiting www.level2.mydomain.com results in a 404 error from Azure 'Error 404 - Web Site not found!' etc.
    Every other single-level subdomain gets through fine e.g. level1.mydomain.com is fine.
    Question:
    Are we doing something unsupported here?
    Thanks in advance,
    H

    Hi Petr,
    Many thanks for your response!
    With the knowledge that double wildcard certificates are not supported with Azure Websites, I set up a simple test to see if second-level subdomains would work on Azure Websites
    without SSL.
    Test:
    - a template MVC5 app, no SSL endpoint binding and a single custom domain *.mydomain.com.
    - Home controller index action with a simple redirect to another site
    - published to a Shared Azure Website instance
    - DNS entry from *.mydomain.com to <azurewebsitename>.azurewebsites.net
    - wait for everything to propogate
    Result:
    - 'Error 404 - Web Site not found!' on Azure when navigating to www.secondlevel.mydomain.com
    - Successful redirect when navigating to random.mydomain.com (where random is
    not an explicitly mapped subdomain in the DNS service: therefore, wildcard catchall is working as expected for single-level wildcard subdomains)
    Assessment:
    The non-support of second-level subdomains is not restricted to the fact that Azure Websites don't support double wildcard certificates? The issue extends to Azure Website's non-support of double wildcard Custom Domains?
    Thanks,
    H

  • InDesignCC Keyboard shortcuts, both default and customized, don't work, or work sporadically

    It seems like I'm not the only person having these problems, but I thought it was worthwhile to share my experience to see how many others are having the same issues.
    I have several customized quick keys set up in InDesignCC, along with the default keyset. Some appear to work more or less correctly, some--a good example is "Links/Edit Original", which I attempt to use fairly regularly--don't work at all. Even a default quick key like Save As (cmd + shift + S) doesn't work. All that happens when I try to save as, is the word InDesign in the menu bar flashes every time I hit the key combination. Weirder still, if I put my cursor in the menu, and show the file drop down, and THEN try the quick key, it works just fine. I haven't made any system changes or updates, and this is something that's only a problem with InDesignCC (though I have had some similar issues with IllustratorCC), all my CS6 applications work fine. I've even looked through my keyset to make sure that there weren't any conflicts that I was missing, and there weren't. Does anyone have any ideas on how to fix this, or is anyone else dealing with it themselves?

    This is a symptom of InDesign believing that the keyboard shortcut is allocated to a menuitem within the InDesign menu, most likely within the Services menu.
    Similar behavior is seen for Cmd-Shift-L, which is InDesign's shortcut for left alignment, but by default recent versions of Mac OS X assign it to Search With Google, though it should only work when text is selected. Sometimes the OS beats out InDesign and sometimes it doesn't. It's clearly a bug in how InDesign handles its keyboard shortcut interface with the OS as a result of Cocoaization, and I understand InDesign Engineering spent some time trying to make it work and did not succeed.
    Perhaps you can look in the Services menu for a clue, though its contents sometimes changes dynamically, so that may not work so well.
    (hrmm; I see others have covered the above while I was doing other things. oops.)
    With respect to Edit Original, are you aware that you can invoke that by option-doubleclicking? Not the same, but I find it more convenient.

  • I have a MAC. I have Adobe Creative SUite 5.5. I have installed Yosemite. Adobe CS 5.5 don't work!!! Error 16. I have redifined permission. But Adobe ask me serial number my suite. But i can't go on!!!

    I have a MAC.
    I have Adobe Creative SUite 5.5.
    I have installed Yosemite. 
    CS 5.5 don't work!!!
    Error 16. I have redifined permission.
    But Adobe ask me serial number my suite.
    But i can't go on!!!

    Please refer:
    http://helpx.adobe.com/x-productkb/policy-pricing/configuration-error-cs5.html
    Regards,
    Ashutosh

  • The multi level "isolation mode" don't work after the last upgrading to Illustrator CC 18.1.0? by the right mouse button menu

    PROVA

    Yes, I know that, but I ever work with the right mouse button,
    because selecting groups and subgroups with double click make some confusion for me.
    Regards,
    Fabio
    ufficio tecnico
    grafica e prestampa
    Via Verdi, 11 - 43058 Sorbolo (PR)
    Tel. 0521.694111 - Fax 0521.694360
    E-mail: [email protected] <mailto:[email protected]>
    E-mail: [email protected] <mailto:[email protected]>
    Web: www.litoexpress.it <http://www.litoexpress.it/>
    Il giorno 28/ott/2014, alle ore 06:57, Satinder S Bains <[email protected]> ha scritto:
    The multi level "isolation mode" don't work after the last upgrading to Illustrator CC 18.1.0? by the right mouse button menu
    created by Satinder S Bains <https://forums.adobe.com/people/SatinderSBains> in Illustrator - View the full discussion <https://forums.adobe.com/message/6874053#6874053>
    You can double click on the selected object to get into the multilevel isolation mode.
    Regards,
    Satinder
    Please note that the Adobe Forums do not accept email attachments. If you want to embed a screen image in your message please visit the thread in the forum to embed the image at https://forums.adobe.com/message/6874053#6874053
    Replies to this message go to everyone subscribed to this thread, not directly to the person who posted the message. To post a reply, either reply to this email or visit the message page:
    To unsubscribe from this thread, please visit the message page at . In the Actions box on the right, click the Stop Email Notifications link.
    Start a new discussion in Illustrator by email <mailto:[email protected]m> or at Adobe Community <https://forums.adobe.com/choose-container.jspa?contentType=1&containerType=14&container=33 67>
    For more information about maintaining your forum email notifications please go to http://forums.adobe.com/thread/416458?tstart=0 <http://forums.adobe.com/thread/416458?tstart=0>.

  • CS5- Custom Links to EPS Files Don't Work?

    I am building a plugin that allows a user to place graphic assets from our own external asset management system into their InDesign document.  These assets need to maintain a "custom link" to the external assets.
    Everything was working great for simple raster image formats (like JPEG) but the custom link information seems to get lost for EPS files.
    After doing some deep debugging I decided to try building one of the sample plugins that ship with CS5 - 'customdatalink' and the accompanying 'customdatalinkui'.  This sample does a similar type of thing with CSV files that reference external assets.
    To make a long story short, the sample plugin exhibits the exact same behavior.  If you edit one of the sample csv files to point to an EPS image and place that in a document, you'll see that the Link URI is replaced with a file:// style path instead of the custom csv:// URI.  It works as expected for JPEG files.
    Surely this is not expected behavior.  Am I missing something obious here or is this a simple (but pretty major for my plugin) bug?
    Thanks in advance for any assistance.
    p.s. this behavior is identical on both Mac and Windows.

    Here's a bit more detail. Again the idea is to return an IPMStream that doesn't include a IID_IFILESTREAMDATA. So I make a proxy IPMStream that just forwards requests to a real IPMStream.
    I've abbreviated a bit here for space reasons.
    So I make my own IPMStream object adding the class to my .fr file:
    class FileProxyWriteStream : public CPMUnknown<IPMStream>
    public:
                   FileProxyWriteStream(IPMUnknown* boss);
              virtual     ~FileProxyWriteStream();
              void SetRealStream(IPMStream *, AeInDesignGeo *);
              virtual uchar XferByte(uchar& chr) { return mRealStream->XferByte(chr); }
    ... all IPMStream methods
    Create my proxy stream:
    proxyStream = ::CreateObject2<IPMStream>(kFileProxyWriteStreamBoss, IID_IPMSTREAM);
    And I create a IPMStream:
    InterfacePtr<IPMStream>          realStream(StreamUtil::CreateFileStreamReadLazy(file, kOpenIn));
    Tell my proxyStream about the realStream
    proxyStream->SetRealStream(proxyStream);
    and CreateResourceReadStream returns my proxyStream
    Hope this helps
    -doug

  • TS1630 My speaker don't work if I open the music de level control on the end don't apear is the same problem with radio pandora or others apps I erase everything on my iPhone by erase and reset but the problem is here I can't hear the sound or ringer sele

    I need help with my iPhone some body can help me. Speaker don't work when I open the music that work only headphones

    Some body have a solution

  • Share Button not show Permission Level

    Hi,
    We are facing a weird problem in our farm, we have until CU July 2014 versión with an authentication with ADFS2.0.
    In all Site Collections we have breaked the inherited permissions and we gave permissions directly to the SC or by AD Groups, until here, there is no problem
    But recently, we have discovered that the share button in Site collection does not work properly, in some SC it only shows the following:
    But in other sites we have done the same, and it shows correctly the Level permissions of the SC. I have checked that is not a problem with the Custom Master we have deployed, since I have created this SC with the original Seattle Master Page.
    Anyone knows what is happening??
    Thanks

    Hi again,
    With the share button, we have detected the following:
    In SharePoint 2013 Foundation, the share button points to
    http://urlsc/_layouts/15/aclinv.aspx?forsharing=1&lsDlg=1 and it shows both, SharePoint groups and permission levels (Full Control, read, design...) but in SharePoint 2013 Standard and Enterprise, this same share button points to
    http://urlsc/_layouts/15/aclinv.aspx?forsharing=0&lsDlg=1 where only displays SharePoint Groups.
    Anyone knows why this difference? It is a bug? What is the behaviour?
    Thanks

Maybe you are looking for