Permissions Randomly Disappearing/Reverting in SharePoint 2010

Hi everyone,
A couple of our SharePoint team sites have been experiencing an unusual phenomenon where user permissions randomly disappear or revert--all seemingly without any user involvement. I have inspected the Security Audit Logs for the past months, scouring permissions
activity surrounding these events, but I have not been able to identify any user involvement that could have caused or even contributed to these issues. 
One site had a folder whose entire permissions setting became blank. Another site's group ownership reverted to a previous user who moved to a different department several months ago.
We do occasionally restore corrupted Sharepoint items from our DPM backups, but these particular sites and items have not been restored.
I have been reading through several forums and online resources, but I haven't found anything definitive. Any help would be greatly appreciated. Thanks!

Enable Site Collection Auditing on the Site Collection (in Site Settings). There is an option to record change in user permissions/groups. You may also want the Edit Items option.
This should give you a better idea of what is going on next time this happens.
What patch level is your farm at?
Trevor Seward
Follow or contact me at...
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

  • Looking to somehow set permissions on certain views within SharePoint 2010.

    First, let me start off by saying I have full control of my own site but my site is a subsite, I am not a collections site admin. I can speak with them in the case I am needing to.
    I have 4 different list views that should pertain to 4 different permission levels. I also created 4 different groups to house the people in. All I am trying to do is set each group or user (whichever one is possible) to a certain list view that was created
    for them.
    I do not have much coding experience within SP Designer as well.
    Any and all help would be greatly appreciated.
    Stephen Edwards

    Hey,
    By using target audiences, you can display content such as list or library views, items,  and entire Web Parts to specific groups of people. Have below links for your reference.
    Target content to specific audiences
    Audience and content targeting planning (SharePoint Server 2010)
    Thanks.

  • Enable or disable button on a ribbon based on user permissions in SharePoint 2010

    Hi,
    I have requirement to find a way to disable Inheritance, Add and Modify group from permission tab for users who are not added into specific group e.g. Administrators
    I have followed the following article to create a feature but have encountered few issues:
    http://msdn.microsoft.com/en-us/library/ff408060.aspx
    Issues:
    I used the above code as a sample to create a feature and test if it would work. It worked fine but even though i have replaced Location="Ribbon.Library.Actions.ConnectToClient" with my permission locations,
    Connect to Outlook button still doesn't appear when the feature is activated. If i deactive this feature it shows
    Connect to Outlook button even though there is no reference for this in the code!
    I have modified the Elements.XML and have added the following code but it still disables the buttons for a user who has Site Collection Administrator permissions, i just want to disable this for users who are in particular group:
    <?xml version="1.0" encoding="utf-8"?>
    <Elements xmlns="http://schemas.microsoft.com/sharepoint/">
    <CustomAction
    Id="RemoveRibbonButton"
    Location="CommandUI.Ribbon"
    RequireSiteAdministrator = "TRUE"
    >
    <CommandUIExtension>
    <CommandUIDefinitions>
    <CommandUIDefinition
    Location="Ribbon.Permission.Modify" />
    </CommandUIDefinitions>
    </CommandUIExtension>
    </CustomAction>
    <CustomAction
    Id="RemoveRibbonButton"
    Location="CommandUI.Ribbon"
    RequireSiteAdministrator = "TRUE"
    >
    <CommandUIExtension>
    <CommandUIDefinitions>
    <CommandUIDefinition
    Location="Ribbon.Permission.Add" />
    </CommandUIDefinitions>
    </CommandUIExtension>
    </CustomAction>
    </Elements>
    I have also have another issue when this feature is activated even though i haven't removed 'Check' and 'Manage' Ribbon locations, they are also greyed out as shown it the screenshot below:
    I have also created a user control using the following method:
    http://sharepointroot.com/2010/06/18/remove-actions-from-the-ribbon-sharepoint-2010/
    But again i need to restrict it specific user group.
    Any advice how to do this? or which way is better creating a feature or creating a user control? even though i liked the creating the feature as it gives your more control.
    Regards,
    Kashif

    Thanks for your reply Paul.
    I do understand that this is a partial solution and wouldn't stop them completely from doing these actions using different UI but atleast it would remove these options from the ribbon which is causing us some major issues when clicked by mistake especially
    'inherit permissions'.
    We do have governance policies in place and a certain user group can add and remove users from SP site. But the issue we have currently is that when one of these (authorised) users uses 'inherit permissions from parent' site. This removes the unique
    permissions from the subsite and delete all SP groups / permission level in the subsite. In some cases subsite contains confidential information which is then exposed to all the users who have access to the parent site.
    The main button which i'm interested to disable is 'Inherit Permissions' which i believe can't be used from anyother UI apart from the ribbon.
    I just need to know if it's possible to restrict this for some users or group? even if it just removes it from the ribbon only i would be still interested to explore this implementation.
    Any help would be apperciated.
    Regards,
    Kashif

  • Sharepoint 2010 Report viewer Parameters disappear after selected

    Hi,
    I have Sharepoint 2010 installed and pointing to a different SQL Server 2012 in Sharepoint integrated mode. 
    In Sharepoint if I create a new report using report builder or if I add one from reporting services server, when I execute it, it shows the parameters on the right side. When I open the list the values are ok, then if I select one of them the page do a postback
    and the selected parameter value disappears and I can never run the report because if I hit Apply it gives an error saying that the parameter is not set.
    If I change the report and set default value for each parameter it works well. I can change the parameters and they work great, but I don't want to set the default values and let the user choose them.
    Sharepoint server is SQL Server 2012 version 11.0.3368.0
    Reporting server is SQL Server 2012 11.0.3000.0
    Can anybody help me with this issue?
    Thanks
    Carlos Pereira

    Hi  Carlos,
    As per your query.. ensure your web.config has debug="false".
    Still see your SP2 has been installed or not because you using SQL Server 2012 and SharePoint Server 2010.
    FIXING your Reporting Service's Issues
    Detail and step by step of passing multiple filter parameters to custom report viewer web part
    Thanks
    Indul Hassan

  • SharePoint 2010 Item level permissions nightmare...how do I escape this madness?

    We have a custom SharePoint 2010 application that helps process job req. documents from 200+ partner companies. Each company can only see its own job req. documents (done using item level permissions in one document library).
    The number of documents is getting close to 3k. I've read that once you get over 5k, you'll see a huge performance hit because of the number of unique security scopes.
    Creating 200+ libraries is out of the question. That just seems like an even bigger logistical nightmare...especially since we add partners every month almost. We have reports that run off of this data and querying that many libraries would be nuts.
    Next would be making folders for each company. A lot of recoding would need to be done, but my biggest concern will be not being able to sort and filter properly.
    I've tried writing a PowerShell script to copy everything into folders in a new library and the filtering doesn't work even after messing around with the view to not show the folders at all.
    The last thing I'm considering is just archiving older data that may no longer be relevant by year or something.
    Has anyone else run into a similar issue?
    Any suggestions?

    Hi,
    Once you have exceeded the threshold limit, certainly there will be performance issues. However, you can still iterate though lists/libraries that exceed threshold limit by workaround here:
    List Threshold
    Additionally, please refer following link which demonstrates how you can implement sorting/paging for lists exceeding threshold limit:
    https://social.msdn.microsoft.com/Forums/en-US/4f788144-773c-4e63-8c1f-1e51f1c0a82f/client-object-model-fsobjtype-and-list-view-threshold?forum=sharepointdevelopmentprevious
    Hope it helps!
    Thanks,
    Avni Bhatt
    If this helped you resolve your issue, please mark it Answered

  • Help Required - Upload Multiple Documents functionality sometimes disappears in SharePoint 2010

    Hi All,
    We have a web application created in SharePoint 2010 & there we were facing an issue of not able to Upload multiple documents. After doing search on google, we have found that
    pre-requisites for this functionality to be working properly are as follows:
    Client Integration needs to be enabled for the web application.
    The STSUpld.UploadCtl IE add-in must be enabled. (located in C:\Program Files (x86)\Microsoft Office\Office12)
    The 32 bit version of Internet Explorer. The 64 bit version does not support it and neither do other, non IE, browsers.
    Office 2003 or newer on the client.
    After meeting all the above requirements, We are now able to see the Upload Multiple Documents link but we are failing in below 2 scenarios:
    On some machines it is working fine & on some it is not.
    On some machines, this option is available for sometime & sometimes it disappears.
    If any one of you have experienced the same problem, then please help us with your valuable suggestions & possible solution for it.

    Hi Manish,
    We've just been experiencing your initial issue with Office 2007 clients not being able to use the multi-file upload functionality.  Sure enough....turning on presence information in Central Admin fixes the issue.  The strange thing is though that
    when presence is turned off, Office 2003 and 2010 clients still work fine and it's only 2007 clients that fail.  Also this issue appeared to only exist for us inside applications that have been upgraded from MOSS2007 to SP2010.  Any new applications
    of even new site collections within an upgraded application worked fine across all 3 Office versions.
    Coincidently, we're also experiencing the more recent issue you've come across with files not uploading after clicking OK in the ActiveX.  Nothing happens.  Office 2010 clients work fine but 2003 and 2007 clients just don't upload the selected
    files.  We've found a workaround which "fixes" the issue but brings it's own set of problems so it's not ideal.  Here's what we've done...
    1. Open IIS, and navigate to the web where you want to use multi-file upload
    2. Select Handler Mappings and Add Script Map
    3. Set Request Path - shtml.dll
    4. Set Executable - C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\ISAPI\SHTML.dll
    5. Set the name to something meaningful - Multi File Upload
    6. Leave the Request Restrictions as default
    This should fix the issue with files not uploading but unfortunately it also prevents SharePoint Designer from accessing the site.  For the application where we desperately need multi-file upload we can manage without SPD access so it's not the end
    of the world but not ideal.  We've actually got an outstanding incident logged with Microsoft to resolve this issue but they've yet to find a solution for us.  We suggested to MS that we update authentication to Kerberos from NTLM and retry as we
    seem to be getting 401 errors in the call stack so thought that could be related.  We've not yet configured Kerberos so I'm not sure whether this is a solution or not.
    One other point worth mentioning is that SharePoint Designer 2010 (which is free) installs the latest version (14) of the Upload ActiveX and with this installed the uploads work as expected.  Also if you have Silverlight and SPD2010 installed then you
    get a Silverlight control to do the upload which also works fine.  Again, not ideal as rolling out SPD 2010 to affected clients isn't really a suitable solution.
    Sorry I can't be any more help.  Hopefully my findings might point you in the right direction.  If you do find a solution (other than the IIS handler mapping) then please re-post here,
    Good luck,
    Ben

  • Help with adding a user copying permissions from another user $RoleDefinition.Name SharePoint 2010 Powershell

    Hello,
    I need to basically find everyplace 'ADUser1' exists and then add a new 'ADUser2' with the same permissions as the first group.
    I have created a script that runs through an entire web app and finds everyplace the AD account is directly given access to and access via a group.  I then need to add the new user and assign the permissions from the first ADUser, copy them. Below
    is not the entire script, just where I'm trying to add the new user.  The rest of the script works fine to find the first user.  I'm stuck with this part:  $role = $_.RoleDefinitions[$newRoleDef].  I get an error that I can call a method
    on a null valued experssion.. I guess I don't know how to specify to copy the role from the first user, and use it to set the new user?
              #Get the Permissions assigned to user
               $WebUserPermissions=@()
                 foreach ($RoleDefinition  in $WebRoleAssignment.RoleDefinitionBindings)
                                 $WebUserPermissions += $RoleDefinition.Name +";"
            $newRoleDef = $RoleDefinition.Name
              #write-host "with these permissions: " $WebUserPermissions
              #Send the Data to Log file
              "$($Web.Url) `t Site `t $($Web.Title)`t Direct Permission `t $($WebUserPermissions)" | Out-File C:\Apps\Scripts\Logs\UserAccessReport.csv -Append
        $assignment = New-Object Microsoft.SharePoint.SPRoleAssignment($account)
                    $role = $_.RoleDefinitions[$newRoleDef]
                    $assignment.RoleDefinitionBindings.Add($role)
                    $_.RoleAssignments.Add($assignment)

    Hi,
    According to your post, my understanding is that you want to copy user permission to another user via PowerShell.
    Instead of copy permission to another user, we can get the user permission, assign the permission to a group, then add the other user to the group. Now the user would get the same permssion as this user.
    http://get-spscripts.com/2010/07/adding-groups-with-permission-levels-to.html
    http://blog.thefullcircle.com/2013/02/create-a-sharepoint-group-with-permissions-and-add-an-ad-group-to-it/
    We can also use the third-party tool to achieve the same scenario.
    http://permissionsmanager.codeplex.com/
    http://www.boostsolutions.com/blog/how-to-copy-permissions-to-other-users-in-sharepoint/
    Thanks,
    Jason
    Jason Guo
    TechNet Community Support

  • What third party tools exist to show a user or groups permissions and access rights for an entire SharePoint 2010 site collection?

    Our admin crew has just inherited a 4 year old SharePoint site that was developed on SP 2007 and later migrated to SP 2010.  We are trying to determine which users and groups have access to the 150+ sub-sites of the site and at what permission levels.
    Research tells me SharePoint 2010 has no means to simply list out a user's permission levels over an entire site collection, but that it must be done at each sub-site, list & library that has permission inheritance broken to create a unique permissions
    object.
    Has anyone found a solution to this issue?  Without days of research at each sub-site, list & library, how would one more economically go about such an investigation of a user's permissions on an entire SharePoint 2010 site?

    Hello,
    There is no direct way to see user and group broken permission within a site collection. However you can write powershell script to get the permission. You can modify the below script based on your need and export result in CSV. You may also need to add
    code to iterate all subsites within site collection.
    http://social.technet.microsoft.com/wiki/contents/articles/14242.sharepoint-2010-export-all-unique-permissions-from-site-collection-using-powershell.aspx
    http://en.community.dell.com/techcenter/windows-management/b/weblog/archive/2012/09/25/sharepoint-security-reporting-using-powershell
    Codeplex tool is also available to check permission but it is not always fulfill business need. You may also look at this if it suits you.
    https://permissionsmanager.codeplex.com/ 
    Hope it could help
    Hemendra:Yesterday is just a memory,Tomorrow we may never see<br/> Please remember to mark the replies as answers if they help and unmark them if they provide no help

  • Sharepoint 2010 - Hiding 'Site Permissions' on the Site Actions toolbar for an entire site collection

    Good morning,
    I have been tasked with creating a feature that will allow a customer to hide the 'Site Permissions' menu option on the Site Actions toolbar.
    I was thinking this could be done easly with a site scoped feature with a feature.xml as follows
    and a manifest file like this
    I think what I have listed is an incorrect HideActionID but I am not finding the correct ID listed anywhere in the documentation.
    The other two custom actions that are in the manifest work perfectly and hide 'delete web' in site settings and add a new item to the site actions toolbar.
    Can you point me to the correct HideActionId for site permissions or tell me where to look.

    I will agree with Paul, but just in case if you dont change approach, below client side code may help.
    <script type="text/javascript">
    var doc = document.getElementsByTagName('ie:menuitem');
    for (var i = 0; i < doc.length; i++){
    itm = doc[i];
    if (itm.id.match('MenuItem_SitePermissions') != null){
    itm.hidden=true;
    break;
    </script>
    jQuery:
    $('ie\\:menuitem[id*=MenuItem_SitePermissions]').attr("hidden","true")
    Link: SharePoint 2010 Menu IDs
    Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

  • Random users receive an unexpected error when trying to access SharePoint 2010 farm.

    Over the past few months we had occasions where established users trying to connect to my production SharePoint 2010 farm receive a correlation error page when trying to access the farm. I have two WFEs load balanced and the errors show up on either so it
    doesn't happen on just on or the other. Specifically today it was three users in one office  out of about 15 that were affected the rest were able to access the farm without any problems and there were no other reports from other offices. Each time the
    user can eventually get in without any outside intervention it just seems to fix itself after a few hours. Each time it happens I search the logs for the CorrelationID(s) and everytime I see the same set of errors in the ULS logs. I also go check the Windows
    Security logs to make sure they connected to the server okay. I've confirmed that the Web App's PortalSuperUserAccount and PortalSuperReaderAccount are both set correctly. Just looking to see if anyone has experienced this and figured what was happening and
    how to fix it.
    These are the log entries:
    Name=Request   (GET:http://infoshare.swic.edu:80/SitePages/Home.aspx)
    Begin Query the AD to get the user email   and display name.
    End Query the AD to get the user email   and display name.
    Leaving Monitored Scope   (GetFileAndMetaInfo). Execution Time=29.4404440877166
    Leaving Monitored Scope   (GetWebPartPageContent). Execution Time=29.6140602113035
    Site=/
    Leaving Monitored Scope   (PostResolveRequestCacheHandler). Execution Time=30.6330444222452
    SPWeb is missing it's CurrentUser for   user 'SHAREPOINT\system'.
    PortalSiteMapProvider was unable to fetch   current node, request URL: /SitePages/Home.aspx, message: Object reference   not set to an instance of an object., stack trace:   
    at   Microsoft.SharePoint.SPUser.get_UserToken()    
    at   Microsoft.SharePoint.Publishing.CommonUtilities.<>c__DisplayClass1.<RunWithElevatedSite>b__0()    
    at   Microsoft.SharePoint.SPSecurity.<>c__DisplayClass4.<RunWithElevatedPrivileges>b__2()    
    at   Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated   secureCode)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback   secureCode, Object param)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated   secureCode)    
    at Microsoft.SharePoint.Publishing.CommonUtilities.RunWithElevatedSite(SPSite   siteNonEle...
    ...v, Boolean allowUnsafeUpdates,   ElevatedSiteProcessor callWithElevatedSite)    
    at   Microsoft.SharePoint.Publishing.CacheManager..ctor(SPSite site)    
    at Microsoft.SharePoint.Publishing.CacheManager.GetManager(SPSite   site, Boolean useContextSite, Boolean allowContextSiteOptimization)    
    at   Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapProvider.get_ObjectFactory()    
    at   Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapProvider.get_CurrentNode()
    SPWeb is missing it's CurrentUser for   user 'SHAREPOINT\system'.
    DelegateControl: Exception thrown while   adding control 'ASP._controltemplates_metadatanavtree_ascx': Object reference   not set to an instance of an object.
    Setting [Display] as the   FormContext.FormMode for the current page
    SPWeb is missing it's CurrentUser for   user 'SHAREPOINT\system'.
    PortalSiteMapProvider was unable to fetch   root node, request URL: /SitePages/Home.aspx, message: Object reference not   set to an instance of an object., stack trace:   
    at   Microsoft.SharePoint.SPUser.get_UserToken()    
    at   Microsoft.SharePoint.Publishing.CommonUtilities.<>c__DisplayClass1.<RunWithElevatedSite>b__0()    
    at   Microsoft.SharePoint.SPSecurity.<>c__DisplayClass4.<RunWithElevatedPrivileges>b__2()    
    at   Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated   secureCode)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback   secureCode, Object param)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated   secureCode)    
    at Microsoft.SharePoint.Publishing.CommonUtilities.RunWithElevatedSite(SPSite   siteNonElev, ...
    ...Boolean allowUnsafeUpdates,   ElevatedSiteProcessor callWithElevatedSite)    
    at   Microsoft.SharePoint.Publishing.CacheManager..ctor(SPSite site)    
    at Microsoft.SharePoint.Publishing.CacheManager.GetManager(SPSite   site, Boolean useContextSite, Boolean allowContextSiteOptimization)    
    at   Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapProvider.get_ObjectFactory()    
    at   Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapProvider.get_TryGetRootNode()
    SPWeb is missing it's CurrentUser for   user 'SHAREPOINT\system'.
    PortalSiteMapProvider was unable to fetch   root node, request URL: /SitePages/Home.aspx, message: Object reference not   set to an instance of an object., stack trace:   
    at   Microsoft.SharePoint.SPUser.get_UserToken()    
    at   Microsoft.SharePoint.Publishing.CommonUtilities.<>c__DisplayClass1.<RunWithElevatedSite>b__0()    
    at   Microsoft.SharePoint.SPSecurity.<>c__DisplayClass4.<RunWithElevatedPrivileges>b__2()    
    at   Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated   secureCode)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback   secureCode, Object param)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated   secureCode)    
    at Microsoft.SharePoint.Publishing.CommonUtilities.RunWithElevatedSite(SPSite   siteNonElev, ...
    ...Boolean allowUnsafeUpdates,   ElevatedSiteProcessor callWithElevatedSite)    
    at   Microsoft.SharePoint.Publishing.CacheManager..ctor(SPSite site)    
    at Microsoft.SharePoint.Publishing.CacheManager.GetManager(SPSite   site, Boolean useContextSite, Boolean allowContextSiteOptimization)    
    at   Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapProvider.get_ObjectFactory()    
    at   Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapProvider.GetRootNodeCore()
    Exception in   SearchBoxEx::CreateChildControls:System.ArgumentException: Requested value   '/sites/search/Pages/' was not found.      
    at System.Enum.Parse(Type enumType, String value, Boolean ignoreCase)    
    at   Microsoft.SharePoint.Portal.WebControls.SearchBoxEx.GetSiteDefaultsInner(PortalWebSiteMapNode   rootWeb, SPSite site)    
    at   Microsoft.SharePoint.Portal.WebControls.SearchBoxEx.<>c__DisplayClass2.<GetSiteDefaults>b__0()    
    at   Microsoft.SharePoint.SPSecurity.<>c__DisplayClass4.<RunWithElevatedPrivileges>b__2()    
    at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated   secureCode)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback   secureCode, Object param)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated...
    ... secureCode)    
    at   Microsoft.SharePoint.Portal.WebControls.SearchBoxEx.GetSiteDefaults()    
    at   Microsoft.SharePoint.Portal.WebControls.SearchBoxEx.CreateChildControls()
    SPWeb is missing it's CurrentUser for   user 'SHAREPOINT\system'.
    Failed to create a custom control   'PublishingSiteActionsMenuCustomizer', feature 'Publishing'   (id:22a9ef51-737b-4ff2-9346-694633fe4416) using attributes (ControlSrc='',   ControlAssembly='Microsoft.SharePoint.Publishing,
    Version=14.0.0.0,   Culture=neutral, PublicKeyToken=71e9bce111e9429c',   ControlClass='Microsoft.SharePoint.Publishing.WebControls.PublishingSiteActionsMenuCustomizer':   System.Reflection.TargetInvocationException: Exception has been thrown
    by the   target of an invocation. ---> System.NullReferenceException: Object   reference not set to an instance of an object.    
    at   Microsoft.SharePoint.SPUser.get_UserToken()    
    at   Microsoft.SharePoint.Publishing.CommonUtilities.<>c__DisplayClass1.<RunWithElevatedSite>b__0()    
    at   Microsoft.SharePoint.SPSecurity.<>c__DisplayClass4.<RunWithElev...
    ...atedPrivileges>b__2()    
    at   Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated   secureCode)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback   secureCode, Object param)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated   secureCode)    
    at   Microsoft.SharePoint.Publishing.CommonUtilities.RunWithElevatedSite(SPSite   siteNonElev, Boolean allowUnsafeUpdates, ElevatedSiteProcessor   callWithElevatedSite)    
    at   Microsoft.SharePoint.Publishing.CacheManager..ctor(SPSite site)    
    at   Microsoft.SharePoint.Publishing.CacheManager.GetManager(SPSite site, Boolean   useContextSite, Boolean allowContextSiteOptimization)    
    at Microsoft.SharePoint.Publishing.WebControls.CombinedBasePermissions..ctor()    
    at Microsoft.ShareP...
    ...oint.Publishing.WebControls.ConsoleVisibleUtilities.get_CanShowSiteActionsMenuItems()    
    at   Microsoft.SharePoint.Publishing.WebControls.PublishingSiteActionsMenuCustomizer..ctor()    
    at   System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean   skipVisibilityChecks, Boolean fillCache)      
    --- End of inner exception stack trace ---    
    at System.RuntimeType.CreateInstanceImpl(Boolean   publicOnly, Boolean skipVisibilityChecks, Boolean fillCache)    
    at System.Activator.CreateInstance(Type   type, Boolean nonPublic)    
    at   Microsoft.SharePoint.Utilities.SPUtility.CreateServerControlFromAssembly(String   sControlAssembly, String sControlClass)      
    at   Microsoft.SharePoint.SPControlElement.BuildCustomControl(TemplateControl   tctlPage, String sControlAssembly, String sControlClass, String sCon...
    ...trolSrc, XmlNode xnElementDefinition,   SPFeatureDefinition featdefElement, String sElementId)    
    at   Microsoft.SharePoint.SPCustomActionElement.BuildCustomControl(TemplateControl   tctlParent)    
    at   Microsoft.SharePoint.WebControls.FeatureMenuTemplate.CreateChildControls().
    SPWeb is missing it's CurrentUser for   user 'SHAREPOINT\system'.
    System.NullReferenceException: Object   reference not set to an instance of an object.   
    at   Microsoft.SharePoint.SPUser.get_UserToken()    
    at Microsoft.SharePoint.Publishing.CommonUtilities.<>c__DisplayClass1.<RunWithElevatedSite>b__0()    
    at   Microsoft.SharePoint.SPSecurity.<>c__DisplayClass4.<RunWithElevatedPrivileges>b__2()    
    at   Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated   secureCode)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback   secureCode, Object param)    
    at   Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated   secureCode)    
    at   Microsoft.SharePoint.Publishing.CommonUtilities.RunWithElevatedSite(SPSite siteNonElev,   Boolean allowUnsafeUpdates, ElevatedSiteProcessor callWithElevatedSite)    
    at M...
    ...icrosoft.SharePoint.Publishing.CacheManager..ctor(SPSite   site)    
    at   Microsoft.SharePoint.Publishing.CacheManager.GetManager(SPSite site, Boolean   useContextSite, Boolean allowContextSiteOptimization)    
    at   Microsoft.SharePoint.Publishing.WebControls.ConsoleUtilities.IsMasterPageGalleryUrlForSite(Uri   uri)    
    at   Microsoft.SharePoint.Publishing.WebControls.ConsoleVisibleUtilities.ConsoleAppliesInCurrentContext()    
    at   Microsoft.SharePoint.Publishing.Internal.WebControls.PublishingRibbon.OnLoad(EventArgs   e)    
    at   System.Web.UI.Control.LoadRecursive()      
    at System.Web.UI.Control.LoadRecursive()    
    at   System.Web.UI.Control.LoadRecursive()      
    at System.Web.UI.Control.LoadRecursive()    
    at   System.Web.UI.Control.LoadRecursive()      
    at System.Web.UI.Control.LoadRecursive()    
    at System.Web...
    ....UI.Control.LoadRecursive()    
    at   System.Web.UI.Control.LoadRecursive()      
    at System.Web.UI.Control.LoadRecursive()    
    at System.Web.UI.Page.ProcessRequestMain(Boolean   includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
    Leaving Monitored Scope (Request   (GET:http://infoshare.swic.edu:80/SitePages/Home.aspx)). Execution   Time=78.9268136821824

    Hi LonF1,
    For solving your issue, please try to update the SuperUser and SuperReader per the article below:
    http://technet.microsoft.com/en-us/library/ff758656.aspx
    $wa = Get-SPWebApplication -Identity "<WebApplication>"
    $wa.Properties["portalsuperuseraccount"] = "<SuperUser>"
    $wa.Properties["portalsuperreaderaccount"] = "<SuperReader>"
    $wa.Update()
    If this issue still exists, please feel free to let me know.
    Best Regards,
    Wendy
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Wendy Li
    TechNet Community Support

  • How to add User Permissions to form created in InfoPath 2010 created for SharePoint document Library

    Hi,
    I created a form in InfoPath 2010 with three views (one for user input, the other two views to be used by supervisors) and published this to a SharePoint 2010 document library. Now the way this form is supposed to work is that when a User goes to the document
    library and adds a document, it is supposed to open the Form with the User's input view. When the User submits the document, only him/her should be able to open and possibly edit the the form. When the Immediate Supervisor opens the form, it should open in
    the Supervisors view and allow them to fill in only their section and not be able to edit or alter the user's data. When the Immediate Supervisor saves the document, the Over-all Supervisor should be able to open it in their view and not be able to edit or
    alter the sections filled out by the User and Immediate Supervisor.
    How would i go about completing this? I have the views created but now have the problem of associating these views with their respective users or groups.

    Hello,
    You need to first create user group in sharepoint site then add user in group according to their role. Later you need to call usergroup.asmx web service to get current logged-In user group name so you can switch view and also apply rule for editing or disabling
    controls in form.
    Follow this link to get group name:
    http://social.technet.microsoft.com/wiki/contents/articles/13271.sharepoint-2010-extracting-user-group-of-current-login-user-in-infopath-2010.aspx
    http://social.msdn.microsoft.com/Forums/en-US/018f5184-5c83-4a53-b66b-8c376fc800fc/how-to-get-current-users-sharepoint-group-name-sharepoint-2010-infopath-2010
    To apply rule on control:
    http://office.microsoft.com/en-in/infopath-help/add-rules-for-performing-other-actions-HA101783373.aspx
    Hope it could help
    Hemendra:Yesterday is just a memory,Tomorrow we may never see
    Please remember to mark the replies as answers if they help and unmark them if they provide no help

  • Sharepoint 2010 Library - All documents are Read Only regardless of permissions and clicking edit

    Good afternoon all,
    I'm running out of places for me to find assistance on this issue, and am hoping you can help. We're running Sharepoint 2010 as our Intranet. Myself and the rest of the IT staff are administrators, and we're looking under a section that we're specifically
    in control of where we have documents for our use. One of the administrators reported that he wasn't able to open a document, and neither was I. This was an older spreadsheet that was never converted. I couldn't open it either, nor could I delete it or manipulate
    the entry in the library. I could open explorer and open the file that way, or download it through Chrome.
    I was able to remove the file, upconvert the file to .xlsx, and reupload it. Now myself and the users are able to open the file, but we can't manipulate it. In addition to this, it seems that any Office file that we attempt to open in Sharepoint opens up
    in Read Only. If we click Read Only, and hit Edit, it stays Read Only (once in a blue moon it allows us to edit it). If we hit edit it still says Read Only at the top.
    I'm not the most experienced at Sharepoint so any assistance would be greatly appreciated.
    Thanks!

    Hi,
    For your issue, try to get rid of the serviceDebug and serviceMetadata entries in the web application's web.config:
    <behaviors>
    <serviceBehaviors>
    <behavior>
    <serviceDebug includeExceptionDetailInFaults="true" />
    <serviceMetadata httpGetEnabled="true" />
    </behavior>
    </serviceBehaviors>
    </behaviors>
    For detailed information, refer to the following blog:
    http://nikcharlebois.sharepointspace.com/Blog/Lists/Posts/Post.aspx?ID=22
    Besides, here are similar issue posts, you can use as a reference:
    http://stackoverflow.com/questions/19164313/sharepoint-opens-documents-in-read-only-mode-for-users-with-office-2010
    https://social.technet.microsoft.com/Forums/office/en-US/a31ab681-b73a-4b20-8ac8-b80a8c8be59f/documents-in-sharepoint-2010-library-opening-as-readonly-for-all-users?forum=sharepointgeneralprevious
    Best Regards,
    Lisa Chen
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • Site Actions Menu randomly disappearing

    Hi,
    We currently have a situation were the Site Actions menu/button randomly disappears for users that should have site owner permissions. The Site Actions menu will appear for a short while after assigning site owner permissions however will disappear shortly
    after. The only way I'm able to get it to display again is to remove owner premissions from the user then re-add them again.
    Has anybody seen this behaviour?
    Further information:
    Using SharePoint 2010;
    Using Claims Authenication, Trusted Identity Provider ADFS;
    Thanks,
    Ben

    Hi Ben,
    Please check whether there is a web part that is crashed on the site.
    Whether this issue occurred for all users who have site owner permissions.
    Please try to go to IE advance setting tab and reset the settings, compare the result.
    Here are some similar posts for you to take a look at:
    http://social.technet.microsoft.com/Forums/en-US/af91d404-0746-4632-84ee-82785a2161a2/sites-actions-missing-for-site-owners?forum=sharepointadminprevious
    http://social.technet.microsoft.com/Forums/en-US/5603781c-c10d-4e35-b9bb-ea573a28ef9f/site-action-menu-problem?forum=sharepointadminlegacy
    http://sajiviswam.wordpress.com/2009/07/07/site-actions-menu-missing/
    http://www.microsoft-questions.com/microsoft/SharePoint-Windows-Services/30817416/disappearing-site-actions-menu.aspx
    If the menu was missing after SharePoint backup or restore, please take a look at:
    http://otak-otak-it.blogspot.com/2010/07/missing-site-actions-menu-after.html
    I hope this helps.
    Thanks,
    Wendy
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Wendy Li
    TechNet Community Support

  • Getting Prompt for Credentials When Opening InfoPath 2010 Form in Sharepoint 2010

    I have a domain user who runs Office 2010 x32 and uses a Sharepoint 2010 site daily. Lately a specific page on that site has been randomly giving prompts for credentials when opening existing documents and creating new ones. The process can be most easily
    replicated by opening the new document template in Infopath by going to Documents -> New in the ribbon bar of the SP page. Most of the time the Windows credentials for the user are passed to Infopath/Sharepoint automatically (which is normal), but on the
    fourth or fifth attempt to create a new form, the prompt appears. The user can still enter the credentials and open the blank template form, but a prompt should not appear. The user is also the administrator for that page, so I'm thinking it's not a permissions
    issue.
    The user is running IE 9 on Windows 7 Pro x64. I have performed the following:
    Reset advanced IE settings and all user cache data
    Cleared cached Sharepoint credentials in Windows credential manager
    Re-applied group policy for the machine using gpupdate /force
    Logged in with a clean temporary profile
    Logged in to another domain account using the user's Sharepoint credentials
    Cleared Infopath cache
    Re-installed Office 2010 x32
    The problem only occurs only on this particular machine. There are no Sharepoint or authentication-related errors or warnings in the application and system event logs. There are also no error messages on-screen when the prompt appears. I also considered
    the possibility of this being a performance related issue in the case that maybe Infopath was taking too long to start, causing the credential pass-through process to time out and fall back to a prompt. I ran disk cleanup, deleted some temporary files, and
    checked for excessive CPU/memory load. I didn't find any issues and doing these things did not help.
    I'm convinced there is another setting somewhere in Windows that is causing this. Interestingly it always happens after four or five attempts, never the first time. Can someone point me in the right direction?

    Hi Titan, this sounds like an IE security setting issue. Things to do:
    1. In Internet options>Security>Local Intranet, make sure "Enable Protected Mode" is not selected.
    2. Under Sites>Advanced, add https://*.sharepoint.com (and make sure "Require server verification..." is not checked).
    3. Under Security>Custom Level, scroll all the way to the bottom and make sure "Automatic logon with current user..." is checked.
    cameron rautmann

  • Sharepoint 2010 Permission level Full Control and explicit deny

    I am facing a very frustating permission level issue with Sharepoint 2010. First, everything worked as expected up to few days ago.
    I have a user on my sharepoint 2010 env (publishing portal) named rjo who is site collection administrator and has also Full Control permission level.
    When I execute the Check Permission command from the ribbon I get the following:
    Permission levels given to xxxx\rjo
    Full Control
    Given through the "xxx Owners" group.
    The following factors also affect the level of access for xxx\rjo (xxx\rjo)
    Deny
    Manage Permissions
    Create and change permission levels on the Web site and assign permissions to users and groups.
    Deny
    Create Subsites
    Create subsites such as team sites, Meeting Workspace sites, and Document Workspace sites.
    etc.. Seems like all the individual permissions are set to deny.
    If I remove the user rjo from the Full Control permission level, all the deny permissions disappear. I have tried creating a brand new permission level with Allow permission on al items but I still get the deny when I check the permissions. Notice that this
    happens for all the users.
    Does anyone experienced a similar issue? I suspect some kind of Windows update to have messed up the permissions but I cannot find a way to get proper permissions to my users.

    I had a similar issue.  When checking user permissions on any member of the site collection Owners group, the results were similar to those posted above.  Also noticed that some buttons on the ribbon were missing.  Also found that no user
    could add content to Library.  The Add button was missing.  Issue was only happening on one site collection in the web application, so it was not a Web App Policy issue.
    Eventually discovered that the site collection was locked as read-only.
    Central Administration > Application Management > Configure Quotas and Locks
    change the web application and site collection as needed to view setting for the affected site collection
    Found lock set to 'Read-only'  Changed to 'Not Locked'

Maybe you are looking for