Problems with Item level access rights

I am having problems with a page group I created. I have applied item level security to an item on a page, managed by me and viewable by one access group. I then created multiple users and signed in as one user who was not in the access group to see that item. When I navigated to that page, I could see the item. When I restricted access to the tab on the page, I could not see the tab, so that worked. But when I opened access to the tab, I could still see the item.
Here are my settings:
Page Group Properties: Display Page To Public Users checked and Enable Item Level Security checked.
Page Properties: Display Page To Public Users checked and Enable Item Level Security checked.
Tab Properties: Specify Access Settings checked and added all of the appropriate groups with view access.
Text Item Properties: Define Item Level Access Privileges and managed by me and viewable by one access group.

Similar Messages

Setting Item level access rights on sharepoint list item in ItemAdding event handler

Hi ,
I am using sharepoint 2013. I am trying to set item level access rights when a list item is added using the following code snippet,
public override void ItemAdding(SPItemEventProperties properties)
base.ItemAdding(properties);
ConfigureItemSecurity(properties);
private void ConfigureItemSecurity(SPItemEventProperties properties)
var item=properties.ListItem;
SPSecurity.RunWithElevatedPrivileges(delegate()
using (SPSite site = new SPSite(properties.SiteId))
using (SPWeb oWeb = site.OpenWeb())
item.ParentList.BreakRoleInheritance(true);
oWeb.AllowUnsafeUpdates = true;
var guestRole = oWeb.RoleDefinitions.GetByType(SPRoleType.Reader);
var editRole = oWeb.RoleDefinitions.GetByType(SPRoleType.Editor);
SPGroup HRGroup = oWeb.SiteGroups.Cast<SPGroup>().AsQueryable().FirstOrDefault(g => g.LoginName=="HR Team");
SPRoleAssignment groupRoleAssignment = new SPRoleAssignment(HRGroup);
groupRoleAssignment.RoleDefinitionBindings.Add(guestRole);
SPUserCollection users = oWeb.Users;
SPFieldUserValueCollection hm = (SPFieldUserValueCollection)item["HiringManager"];
SPFieldUserValueCollection pm = (SPFieldUserValueCollection)item["ProjectManager"];
SPFieldUserValueCollection pmChiefs = (SPFieldUserValueCollection)item["ProjectManagerChief"];
item.BreakRoleInheritance(true);
item.RoleAssignments.Add(groupRoleAssignment);
foreach (SPFieldUserValue staffMember in hm)
SetRightsOnItem(item, staffMember, editRole);
foreach (SPFieldUserValue staffMember in pm)
SetRightsOnItem(item, staffMember, guestRole);
foreach (SPFieldUserValue staffMember in pmChiefs)
SetRightsOnItem(item, staffMember, guestRole);
item.Update();
private void SetRightsOnItem(SPListItem item, SPFieldUserValue staffMember, SPRoleDefinition role)
SPUser employeeUser = staffMember.User;
var userRoleAssignment = new SPRoleAssignment(employeeUser);
userRoleAssignment.RoleDefinitionBindings.Add(role);
item.RoleAssignments.Add(userRoleAssignment);
Nothing is happening though... Is the event handler the right place to do this?
thank you

Hi ,
You can refer to the code working in my environment:
using System;
using System.Security.Permissions;
using Microsoft.SharePoint;
using Microsoft.SharePoint.Utilities;
using Microsoft.SharePoint.Workflow;
namespace ItemLevelSecurity.ItemSecurity
/// <summary>
/// List Item Events
/// </summary>
public class ItemSecurity : SPItemEventReceiver
/// <summary>
/// An item was added.
/// </summary>
public override void ItemAdded(SPItemEventProperties properties)
SPSecurity.RunWithElevatedPrivileges(delegate()
try
using (SPSite oSPSite = new SPSite(properties.SiteId))
using (SPWeb oSPWeb = oSPSite.OpenWeb(properties.RelativeWebUrl))
//get the list item that was created
SPListItem item = oSPWeb.Lists[properties.ListId].GetItemById(properties.ListItem.ID);
//get the author user who created the item
SPFieldUserValue valAuthor = new SPFieldUserValue(properties.Web, item["Created By"].ToString());
SPUser oAuthor = valAuthor.User;
//assign read permission to item author
AssignPermissionsToItem(item,oAuthor,SPRoleType.Reader);
//update the item
item.Update();
base.ItemAdded(properties);
catch (Exception ex)
properties.ErrorMessage = ex.Message; properties.Status = SPEventReceiverStatus.CancelWithError;
properties.Cancel = true;
public static void AssignPermissionsToItem(SPListItem item, SPPrincipal obj, SPRoleType roleType)
if (!item.HasUniqueRoleAssignments)
item.BreakRoleInheritance(false, true);
SPRoleAssignment roleAssignment = new SPRoleAssignment(obj);
SPRoleDefinition roleDefinition = item.Web.RoleDefinitions.GetByType(roleType);
roleAssignment.RoleDefinitionBindings.Add(roleDefinition);
item.RoleAssignments.Add(roleAssignment);
Thanks,
Eric
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected].
Eric Tao
TechNet Community Support

HT1631 updated to the new os x mavericks, now i'm having problems with my keychain access...everytime i asked to log in but when i do, it says can't find login items even if i reset it. what should i do?

updated to the new os x mavericks, now i'm having problems with my keychain access...everytime i asked to log in but when i do, it says can't find login items even if i reset it. what should i do?

Did you install the latest driver set for the device? there is a new release on motu.com for mavericks.
rachel

Problem with Item Validation

Hello,
I am running an advanced tutorial: http://download.oracle.com/docs/cd/E14373_01/appdev.32/e13363/issue_track_ui.htm#BGBJCGIC
and I have a problem with item Validation.
Tutorial offers the following:
You must manually create another validation to ensure that the Actual End Date is the same or later then the Start Date.
To add a validation for the Actual End Date:
1.Under Page Processing, Validations, click the Create icon.
2.For Level, accept the default, Item level validation, and click Next.
3.For Item, select Project Details: 50.P3_ACTUAL_END_DATE (Actual End Date) and click Next.
4.For Validation Method:
a.Select PL/SQL and click Next.
b.Accept the default, PL/SQL Expression and click Next.
5.For Sequence and Name:
a.Sequence - Enter 50.
b.Validation Name - Enter P3_END_AFTER_START.
c.Accept the remaining defaults and click Next.
6.For Validation:
a.Validation - Enter:
to_date(:P3_ACTUAL_END_DATE,:APP_DATE_FORMAT) >= to_date
(:P3_START_DATE,:APP_DATE_FORMAT)
b.Error Message - Enter:
Actual End Date must be same or after Start Date.
c.Click Next.
7.For Conditions:
a.Condition Type - Select Value of Item in Expression 1 is NOT NULL
b.Expression 1 - Enter P3_ACTUAL_END_DATE
8.Click Create.
Is there a mistake in explanation? I did it 3 times already, very carefully! I ran the page, entered the date, which is After the Start date, and get the error message: Actual End Date must be same or After Start Date!!
Thank you for your consideration...

I got it solved. I don't know if this is documented(or a bug) but what I did was declare an exception and then raise it and put the form_trigger_failure into the exception handler rather than raise form_trigger_failure in the body.
declare
alreadyExists exception;
begin
-- select .....
raise alreadyExists;
exception
when alreadyExists then
message('.....exists');
raise form_trigger_failure
end;

I have a tesco router and an external hard drive attached to it as a network drive (shared) for my macbook and MB-Air. Have no problems with my MB accessing it, but with MB-AIR it says - 'the version of the server you are trying to connect to is not supp

I have a tesco router and an external hard drive attached to it as a network drive (shared) for my macbook and MB-Air. Have no problems with my MB accessing it, but with MB-AIR it says - 'the version of the server you are trying to connect to is not supported. pls contact your system administrator to resolve the problem'. MB-Air uses maverick downloaded yesterday - upgrade from mountain lion. MB uses snow leopard still, as i am quite used to it and am thinking of upgrade if mavericks work fine on air. Also have parallel on snow leopard but it is no longer supported according to mac website - if i upgrade am i going to lose my parallel and will have to buy a new one!!!

Yes, the Old Master file has a folder for each year where I find all photos from that specific year. I am attaching a screen shot of the file.
In the meantime i have managed to download all photos (it did not download any video files though in mpg, avi, 3gp, m4v,mp4 and mov format) to a new iphoto library. Unfortunately the photos are quite mixed and often doubled up. I ma considering to purchase iphoto library which checks all duplicates in iphoto. this will save me a lot of time. What do you think?

Problem with Revision level for a Material

Hi All,
I have a problem with Revision Levels for a Material.
I want to know the Revision Level for a particular Material for BOM Creation.
Can anyone please let me know from which Table or Funtion Module can I get the Rev Level, once I pass MATNR (Material) and AENNR (Change Number).
<REMOVED BY MODERATOR>
Thanks and Regards,
Harish Kalla
Edited by: Alvaro Tejada Galindo on Apr 14, 2008 4:30 PM

HI,
You can use table AEOI.
Hope this helps.
<REMOVED BY MODERATOR>
Regards,
Sipra
Edited by: Alvaro Tejada Galindo on Apr 14, 2008 4:30 PM

A problem with a session Access

Hi Olivier,
To connect with Forte while running distributed you must use System DNS
instead of User DNS on the server. The ftexec.exe on your server partition
will be launched by the NodeMgr running as UID SYSTEM. User DNS are not
available to processes running as UID SYSTEM.
Zenon Adamek
Purolator
-----Original Message-----
From: Olivier Andrieux [SMTP:oandrieuxaxialog.fr]
Sent: Tuesday, July 04, 2000 4:59 AM
To: forte-userslists.xpedior.com
Subject: (forte-users) A problem with a session Access
Hi,
We have defined a service object which calls a database Access, when we
use the driver odbc of another station the service object is created and
the application runs. But when we use the driver of the server we have an
exception and this message :
SYSTEM ERROR: Unable to start the partition AxiGecom_CL0_Part1 on any of
the
nodes to which it has been assigned. See the remainder of the error
stack for
more information.
Class: qqsp_ResourceException
Error #: [1602, 593]
Detected at: qqcf_StandardConfig::LoadRemotePartition at 5
Last TOOL statement: method InterfaceManager.PrepareLOM
Error Time: Tue Jul 04 10:50:19
Exception occurred (locally) on partition "Forte_cl0_Client",
(partitionId
= EB3ED870-274C-11D4-8051-304F7116AA77:0x3f9:0x2, taskId =
[EB3ED870-274C-11D4-8051-304F7116AA77:0x3f9:0x2.15]) in application
"FTLaunch_cl0", pid 149 on node STAT10 in environment axialog.
SYSTEM ERROR: Unable to start partition AxiGecom_CL0_Part1 on node
SERVEUR59B.
Class: qqsp_ErrorDescriptor
Error #: [1602, 592]
Detected at: qqcf_StandardConfig::LoadRemotePartition at 3
Error Time: Tue Jul 04 10:50:19
Exception occurred (locally) on partition "Forte_cl0_Client",
(partitionId
= EB3ED870-274C-11D4-8051-304F7116AA77:0x3f9:0x2, taskId =
[EB3ED870-274C-11D4-8051-304F7116AA77:0x3f9:0x2.15]) in application
"FTLaunch_cl0", pid 149 on node STAT10 in environment axialog.
SYSTEM ERROR: Attempt to load partition named AxiGecom_CL0_Part1 failed.
Class: qqsp_ResourceException
Error #: [1001, 4]
Detected at: qqrt_ForteExecAgent::LoadPartition at 1
Error Time: Tue Jul 04 10:49:15
Distributed method called: qqrt_ForteExecAgentProxy.LoadPartition!6
(object name Unnamed) from partition "Forte_cl0_Client",
(partitionId =
EB3ED870-274C-11D4-8051-304F7116AA77:0x3f9:0x2, taskId =
[EB3ED870-274C-11D4-8051-304F7116AA77:0x3f9.4]) in application
"FTLaunch_cl0", pid 149 on node STAT10 in environment axialog
Exception occurred (remotely) on partition "Forte_Executor",
(partitionId
= EB3ED870-274C-11D4-8051-304F7116AA77:0x3de, taskId =
[EB3ED870-274C-11D4-8051-304F7116AA77:0x3de.61]) in application
"AxiGecom_cl0", pid 386 on node SERVEUR59B in environment axialog.
SYSTEM ERROR: Failed to create service object
Axigecom_Serveur.Connection_BD.
Class: qqsp_ResourceException
Last TOOL statement: method qqsp_NameList.
Error Time: Tue Jul 04 10:49:15
Exception occurred (remotely) on partition "Forte_Executor",
(partitionId
= EB3ED870-274C-11D4-8051-304F7116AA77:0x3de, taskId =
[EB3ED870-274C-11D4-8051-304F7116AA77:0x3de.61]) in application
"AxiGecom_cl0", pid 386 on node SERVEUR59B in environment axialog.
USER ERROR: (This error was converted)
Failed to connect to database: Axigecom, username: Administrateur.
[Microsoft][Gestionnaire de pilotes ODBC] Source de données non
trouvée et
nom
de pilote non spécifié
Class: qqdb_RemoteAccessException with ReasonCode:
DB_ER_DBMSCONNECTION
DBMS SQLSTATE: IM002
Class: qqsp_ErrorDescriptor
Detected at: qqdb_OdbcVendorInfo::DoSQLConnect at 10
Last TOOL statement: method qqsp_NameList.
Error Time: Tue Jul 04 10:49:15
Exception occurred (remotely) on partition "Forte_Executor",
(partitionId
= EB3ED870-274C-11D4-8051-304F7116AA77:0x3de, taskId =
[EB3ED870-274C-11D4-8051-304F7116AA77:0x3de.61]) in application
"AxiGecom_cl0", pid 386 on node SERVEUR59B in environment axialog.
for information, we use a server NT and the stations use Nt, the drivers
DNS users are declared.
We use Access2000, and the version M for Forté
Thanks in advance,
Olivier Andrieux
AXIALOG
France

I am using ios 7.1 but I still having problems with the level, how can it be solved?

How to solve the problems with the level?

The level that we have in the compass app, it still shows me -2

Alerts on a list with Item Level Permissions.

We have an IS Request list that people can email with their problems. We recently switched to Item Level Permissions where users can only see the requests that they created. IS has full control rights over the list and can see all the
items.
Our issue is that the alerts dont work in this type of list and SharePoint Designer alerts are hokey and less dependable.
Thoughts?
Devster

You can use the IAlertNotificationHandler interface to intercept the e-mail alert and to modify it.
Please check this thread below.
http://social.msdn.microsoft.com/Forums/sharepoint/en-US/29efe27c-26c2-407e-b771-4f77971238ef/alert-problem-permissions?forum=sharepointgeneralprevious
My Blog- http://www.sharepoint-journey.com|
If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

Updating Administrators(built-in) with item-level targeting on an enforced policy

I need help with this.
In our Computers OU, we have an enforced GPO with a computer policy that adds local admins to the computers on our network. The policy is Computer Configuration >> Policies >> Windows Settings >> Security Settings >> Local Policies/User
Rights Assignment >> Restricted Groups >> Group (BUILTIN\Administrators). For this example, we'll call this GPO #1.
I need to add another user account as a local admin, but targeted to certain computers.
I tried to edit GPO #1. I went into Computer Configuration >> Control Panel Settings > Local Users and Groups, and then added a Group with the settings >> Updating >> Administrators (built-in) & item-level targeting to the computers
I wanted, but the setting always gets over-written by the setting that adds local admins.
I then tried to create a GPO with the Group update. Lets call this GPO #2. I enforced this rule, linked it to the OU, changed the order so that GPO #2 is above GPO #1, but this doesn't seem to be working.
Is my inheritance order incorrect?
1 is GPO #2
2 is GPO #1
Ideas anyone?

> In our Computers OU, we have an enforced GPO with a computer policy that
> adds local admins to the computers on our network. The policy is
> Computer Configuration >> Policies >> Windows Settings >> Security
> Settings >> Local Policies/User Rights Assignment >> Restricted Groups
> >> Group (BUILTIN\Administrators).
Restricted Groups has 2 operation modes: Members and Member of. The
first one clears out any existing members, and that's what you use right
now. The second simply adds a group to another group and keeps all
existing members, that's what you want to use for your additional computers.
> I need to add another user account as a local admin, but targeted to
> certain computers.
To do so, you need to create a domain group that contains the related
account(s). This domain group is "member of" local admins. And make sure
this second GPO is linked higher (so it is processed _after_ the first
one that clears out existing members).
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))
Yes I know I can do this, but I can't use item-level targeting with this setup. I don't want the user account to be local admins for all computers. I only want it to be local admins for 4 of them.
Wouldn't precedence take place in this OU if I have the GPO that adds another member as #1, and the GPO that deletes and adds as #2? It isn't working as I had thought it would.

Problem with Permissions while accessing Portal Content

Dear All,
Im facing some problems with the permission in accessing the portal content.
When i right click on any of the folders in the catalog displayed under the System Administration - > System Configuration -> System Landscape -> Content directory provided by SAP . I get the following Menu options on right click -> NEW -- > Folder, Change ID, Copy, Delete.
I dont get a option such as NEW --> System(from template) which is important to configure the ABAP ECC 6.0 System with the EP 7.0 to enable logon through the Portal to access the ABAP Database through Web browser.
I have installed EP 7.0 JAVA stack alone separately and ECC 6.0 ABAP stack alone separately.
I have tried assigning System Admin Role, Super User Role, Group as Administrators. But nothing seems to work.
Im not sure of the roles to be assigned.
thanks,
Deepak
Edited by: Deepak M on Jul 1, 2009 1:16 PM

Deepak,
Try giving the foll roles,
pcd:portal_content/administrator/super_admin/super_admin_role
and groups,
SAP_J2EE_ADMIN
Authenticated Users (GRUP.SUPER_GROUPS_DATASOURCE.AUTHENTICATED_USERS)
Vikram

Problem with item and/or data during page-processing-PS/SQL

Greetings!
On my page I have a custom report (from 2 tables) and a small form-field, that adds and edits data in the report. After generating the form with the wizard I added an extra item, to store the id from one of the tables from the report data.
Now, on submit a calculation should take place, that updates data according user input with a procedure in Page-Prosseses:
declare a number;
begin
case :PLATZ
when 1 then a:=100;
when 2 then a:= 50;
else a:=25;
end case;
update TBL_MITGLIEDER set TURNIERPUNKTE = TURNIERPUNKTE + a
where ID_MITGL = :P14_ID_MITGL;
end;
:PLATZ is user selected (1,2,3), :P14_ID_MITGL stores the reference to TBL_MITGLIEDER (and shows the change, when I select another record)
As I understand, that process should also run, when I submit a chance, but nothing happens then.
But when I try to save a new record (which worked without any problems before adding that process), I get this error message:
ORA-06550: line 1, column 64: PL/SQL: ORA-00957: duplicate column name ORA-06550: line 1, column 7: PL/SQL: SQL Statement ignored
Error Unable to process row of table TBL_TURNIERSIEGER.
Then, when I go back into the app-builder and try to run the page again, I get this message:
ORA-01403: no data found
Error Unable to fetch row.
I am not sure, if you guys have all the information you need, to know whats going on. Maybe this has to do with session-id and the whay, items are updated. I hope you can help me.
Thanks, best regards,
tobi

First can you please post all log file errors
>> I can't really give you a solution or specific recommendation since I did not saw this error yet myself, but on your own risk you can try:
1. You may try to just register 'dts.dll' using regsvr32.exe, but this error may indicate a bigger problem with setup.
If you are running SQL Server 64bit then try running this at the command prompt: %windir%\syswow64\regsvr32 "%ProgramFiles(x86)%\Microsoft SQL Server\90\dts\binn\dts.dll"
2. You can try reinstall from start (In this case you have to make sure that you un-install all)
[Personal Site] [Blog] [Facebook]

Problem with item of type DB column, reinitialized in a process

Hello,
I have a problem with an item P216_username with source type=database column(empty in this case). In a process On Load-After Header(with a sequence number bigger then the Fetch Row sequence number) , I change the value of this item:
:P216_USERNAME := 'custom_value';
When I run the page, I see the item P216_USERNAME with the value from the database column(empty), instead of attributed value from the process('custom_value').
Here is a copy of the page in a debug mode:
0.00: Session: Fetch session header information
0.00: ...Metadata: Fetch page attributes for application 107, page 216
0.00: Fetch session state from database
0.00: Branch point: BEFORE_HEADER
0.00: Fetch application meta data
0.01: Computation point: BEFORE_HEADER
0.01: Processing point: BEFORE_HEADER
0.01: Show page template header
0.01: Computation point: AFTER_HEADER
0.01: Processing point: AFTER_HEADER
0.01: ...Process "Fetch Row from CONSULTANT_ALLOCATION_PERIODS": DML_FETCH_ROW (AFTER_HEADER) F|#OWNER#:CONSULTANT_ALLOCATION_PERIODS:P216_ALLOCATION_PERIOD_ID:ALLOCATION_PERIOD_ID
0.01: ...Process "Initialize Username": PLSQL (AFTER_HEADER) begin :P216_USERNAME := 'custom_value'; htp.p(:P216_USERNAME); end;
custom_value PrintLogout
0.01: Computation point: BEFORE_BOX_BODY
0.01: Processing point: BEFORE_BOX_BODY
0.01: Region: Edit Allocation Period
Edit Allocation Period Cancel
Create
0.02: Item: P216_ALLOCATION_PERIOD_ID HIDDEN
0.02: Item: P216_USERNAME TEXT
Username
0.02: Item: P216_START_DATE PICK_DATE_MM_DD_YYYY
Start Date
0.02: Item: P216_END_DATE PICK_DATE_MM_DD_YYYY
End Date
0.02: Item: P216_COMMENTS TEXTAREA
Comments
custom_value ''
0.02: Computation point: AFTER_BOX_BODY
0.02: Processing point: AFTER_BOX_BODY
0.02: Computation point: BEFORE_FOOTER
0.02: Processing point: BEFORE_FOOTER
0.02: Show page tempate footer
If you had this problem, or you know where it comes from, please answer.
Thank you.

Hi,
Tomáš : I noticed that if i change the Source Used to 'Only when current value in session state is null' it works but I dont think its a normal behaviour.
Scott: Thanks, it's working now with the post computation callculation attribute.
Thanx for answers,
Vastiana

Problem with applications and accessing database

Hi
I have a serious problem with my applications.I was trying to change "users"'s folder icon so I changed the setting in information.I don'y know what I did but It made these problems:
many of applications does not open for example
itunes-->The folder "iTunes" is on a locked disk or you do not have permission...
picasa alerts me with a database error
yahoo messenger just pops up once and doesn't open.
firefox the same problem
net monitor alerts with a database problem.
evernote same problem
all of my address book is erased.
I think somehow I removed the db files or I changed the permission and the programs can not access to their db files.

don't know the last thing I have done was trying to change the icon and after that I found out about the problem.Maybe sth else caused the problem . anyway I copied all of my files to a new user and I removed the user with problems & everything is ok here.thank u all.

Adobe Flashplayer 12 creates problem with Kaltura setting access

After installing Flashplayer 12 I have the following screen: problem with Kaltura 'can't access settings'
(Have screen shot but cannot paste it here ...)
<pre><nowiki>
Looks like:
Captions Settings
FONT SIZE
Stroke ON
Background OFF
SAVE CANCEL
******************</nowiki></pre>
The video plays, albeit with this window in the middle of the image. Just happened after last update.

Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance).
*Do NOT click the Reset button on the Safe Mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes
Clear the cache and cookies only from websites that cause problems.
"Clear the Cache":
*Firefox > Preferences > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Firefox > Preferences > Privacy > Cookies: "Show Cookies"

Problems with Item level access rights

Similar Messages

Maybe you are looking for