Simple 2013 Workflow to break permissions inheritance on a Document Library File?

Anybody got an example of this? Suspect SPD 2013 can't do it and that it must be using VS 2012.
Want a simple solution of a Doc library where users drop files in, but then, users can only View, Edit, Replace and Delete files they created.
============================
Thank You
cyberpine.com

When using a 2010 Workflow you need to add an impersonation step to get the Replace permissions Action. I just tried it with an SPD workflow in my copy of SPO (which has been upgraded to 2013) and it works fine. 2013 workflows don't have an impersonation
step, so there is no replace permissions action. The actions/steps are greyed out unless you've selected an appropriate slot in the designer. Could that be what is happening?
Although there are API available on the SharePoint server to change list item permissions you can only use that in code running on the server, which you can't do in SPO. You wouldn't be able to use this in Azure or another provider. You could
use them in a custom web service created for an OnPrem 2013 environment. For SPO you can only use client side code or web services that already exist. As I mentioned previously the permissions web service doesn't go down to the item permissions
level. I'm also not aware of any CSOM that can change permissions on list items at this point either.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

Similar Messages

How do document permissions differ from its document library and a content roll-up webpart?

I have an excel spreadsheet (a group schedule), in a document folder, on a page that only IT management can see/access/edit, in a site that all IT group members have access to.
for example: http://IT Group site/IT Management Page/Schedule/2015.xlsx
On the group's homepage, I have a content roll-up web part that displays all document library contents in the group site.
IT management consists of 3 people. They can all edit the spreadsheet from the original location, but when they access the document from the content roll-up web part on the group's homepage, they cannot save any changes.
Accessing the file from here: http://IT Group site - content roll-up web part link "2015.xlsx" points to "IT Group site/IT Management Page/Schedule/2015.xlsx"
The error received says "'http://IT Group site/IT Management Page/Schedule/2015.xlsx' is read-only. To save a copy, click OK, then give the workbook a new name in the Save As dialog box."
Where would the permission issue be?
As the SharePoint site owner, I can access the file without any problems saving from either location. Also, I created an IT Management group that has full control over the IT Group site/IT Management Page, and full control over the IT Group site.
Thanks for any info you can share.
Stephanie

Thanks Cameron -
I have no special settings on the document library where the schedule is saved. No content approval necessary or different permissions. The library is set to open documents in client application, and check-in, check out is not activated.
I have logged in to one of their computers. They can access the spreadsheet directly from the document library and make changes freely, and save that version directly to the server, but not from any web parts. Just to test, I created a summary link web part
on the same page that lists the document library, created a link to the file, and the file opens, but they cannot save any changes without renaming the file. The only place they can truly edit the spreadsheet without renaming is from the document library
directly.

Visual Studio 2013 deploying incorrectly the content types of a document library

Hello everyone.
I created a SharePoint farm solution in VS 2013. I add four content types (say, C1, C2, C3, C4, based on the Document content type) and I create a couple of document libraries (say, L1, L2). Now I add C1 and C2 to L1, and add C3 and C4 to L2.
When I deploy the solution from VS, I go to the site and found out that L1 has C1 and C2, as expected. However, L2 has C1 and C2 instead of C3 and C4.
I have reviewed for hours the xml files (Elements, Schema, etc.) and all IDs seem to be correct and all properties are in order.
Has anyone come across a problem like this? Any thoughts will be really appreciated, as I'm clueless and frustrated at this point, after hours of dealing with this problem.
Thanks in advance!
Best regards
Fernando A. Gómez F.
fermasmas.wordpress.com
Galería de ejemplos

Hi Sohel, thanks for your reply.
No, I don't add them programmatically, I added the "Content Type" and "List" items to the VS solution. It generated some files, including Elements.xml and Schema.xml. Then I used the integrated VS designers to add the content types to
the list. A very run-of-the-mill solution, I think, nothing too fancy.
One thing I noticed is that I created a feature, and everytime I add a new list, instead of using the existing feature, it creates a new one, which I delete, and then add the list to the existing feature using the designer.
Finally, something weird happened today. I opened my VS, opened the solution and there was several feature files created out of the blue by the VS. I thought something was messed up with the Visual Studio Online connection, but it happens anyway when working
in disconnected mode.
Fernando A. Gómez F.
fermasmas.wordpress.com
Galería de ejemplos

Workflow 2013 Breaking Role Inheritance On Workflow Task list

When breaking role inheritance on the out of the box Workflow Task List (2013), a custom workflow is suspended when assigning a task
(System.Collections.Generic.KeyNotFoundException: The given key was not present in the dictionary. ).
As soon as task list is inheriting permissions again, the workflow is able to assign tasks. (Similar issue: http://social.msdn.microsoft.com/Forums/en-US/8c60da76-8299-436c-8528-802fa5a594c3/2013-workflow-with-unique-permissions-on-task-list-ends-up-suspended).
I have not found a solution to this issue so far.

Same problem. Any solution found?
in2brain

SP2010: Stop Permissions Inheritance on DocLib not working

Hi,
I have a couple of subsites with unique permissions. Permission inheritance is stopped on each subsite. Now I want additionally stop inheritance of permissions on a doclib of a subsite. The page just refreshes, but nothing is changed.
Has anyone seen this before? I did not try to perform this with Powershell yet.
Sven

Hi,
I understand that you cannot stop permission inheritance for a document library. Does this happen to all the lists or libraries in the sub site?
Log in with another account to edit the library permission. Try to create a new document library to see whether you can stop the permission inheritance. You can try the powershell script below to stop permission inheritance:
$list = (Get-SPWeb "http://siteURL").Lists["Shared Documents"]
$list.BreakRoleInheritance($true,$true)
$list.Update()
Thanks,
Entan Ming
Entan Ming
TechNet Community Support

Simple archiving workflow

Hello,
Im still a beginner when it comes to sharepoint designer an workflows - I am looking for a simple archiving workflow that will take my current excel documents and archive it on a weekly basis onto another location (different library)
thanks!
-Mark

Mark,
Create a simple SharePoint designer workflow to move item("Copy"
function and then the
"Delete" function).from one list to another and publish it
next create a policy for document to call that workflow after 7 days of its creation like below.
Policy will call workflow automatically after 7 days.
Hope it will help
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

How to create column for attachment in SharePoint 2013 Document Library.

I've created document Library where user can upload the file while click on Upload option (OOTB).
Now in this Library I want to create one more column where user can put some comment and attach one more file for reference.
For comment I can create "Single line of text" type calumn where user can put some comment but for attachment not sure which type of column I have to create.
Want to know is there OOTB feature/column available which I can use to Add / create a one more column to upload a document for reference.

Hi,
For issue 1, please refer
To manage the permissions for a Document Set, you must have at least the Design or Full Control permission level.
On the Welcome Page for the Document Set, click the Manage tab of the Document Set ribbon, and then click Permissions.
Do one of the following:
To change the permission settings for the document library itself, click Manage Parent.
To stop inheriting permissions from the document library and create unique permissions for this Document Set individually, click Stop Inheriting Permissions.
To view the specific permissions an individual has, click Check Permissions, and then type the name of the user or group you want to check.
To inherit permissions from the parent document library (if the Document Set was previously configured to stop inheriting them) click Inherit Permissions.
For more information about working with permissions, see the links under See Also.
https://support.office.com/en-in/article/Create-and-manage-Document-Sets-c71d5796-d559-48de-b1b3-42383bdd13ea?ui=en-US&rs=en-IN&ad=IN
For Issue 2:
You can create a link in the Quick Launch bar
http://support.sherweb.com/Faqs/Show/how-to-add-a-link-to-the-quick-launch-toolbar-in-sharepoint-sharepoint-2013
Please don't forget to mark it answered, if your problem resolved or helpful.

The Create List Item workflow action does not work in document library with document template

My end goal is more complex but below is a basic example of the issue I’m having that just simply does not work.
I'm trying to use a site workflow to create an item in a document library that has a document template applied to it but the file that gets created by the workflow is corrupt and cannot be opened.
I created a document library and edited the document template by adding some text to the header and changing it to a Word docx file instead of a Word dotx file. I tested the document template by clicking the files tab in the ribbon and then clicking new
document which opens the document template in Word and allows me to edit and save the document back to SharePoint. Then I created a SharePoint 2013 site workflow in SharePoint Designer that contains a single Create List Item action, and that action creates
an item in the document library with the name field statically defined. I published the workflow and then manually start it on the site. The workflow completes successfully and when I navigate to the document library the document has been created by the workflow.
When I click on the document to open it in the Word Web App it throws the error pictured below and if I open it in the Word client application it just opens a blank document and not the correct document template.
I also tried using a SharePoint 2010 workflow with pretty much the same results. Opening the document in Word Web App gives the same error as above and opening the document in the Word client application gives the error pictured below.
Come on Microsoft creating a Word Document in a SharePoint Document Library from a SharePoint Workflow should just work! Is this a bug or does anyone have any ideas on what is causing the this issue?

I had the same problem with corrupted document - this worked for me:
1. Create a 2010 Workflow which creates the list element in a document library
(you may start this workflow from your 2013 workflow if applicable)
2. In the Create New List Item properties - make sure to set ContentTypeId to your content type
("Id for indholdstype" is Danish for "Contenttype ID")
3. Your Content Type template should be a ".docx" file - NOT a ".dotx" file...!
(I have always created my templates for content types as .dotx files - seems Microsoft wants us to use ordinary .docx files as template files for content types)
Hope this helps you!

Sharepoint 2013 Document library Issue

Hi
In sharepoint 2013 Doc lib,I uploaded a document and I can see it was successful, but then I can’t close the window, or get back to the customer documents unless I “control/alt/delete” and close all IE windows & re-log in. Now, 4 minutes later it
still shows a spinning circle.
Regards,
Prasad

Hi Prasad,
I wonder if there is workflow or event receiver associated to this document library. Please also check ULS log for related error message.
Or you can create a new document library and then upload document, then check if the issue still exists.
If the issue still exists, I suggest you provide the screenshot or more information for further research.
Best Regards
Dennis Guo
TechNet Community Support

Is it possible to get Exchange emails downloaded to SharePoint document library using Powershell and or Custom Workflow?

I have been asked to see if it would be possible to get exchange emails downloaded and or sent to a document library .
I know of the sitemail box app. but we are not running Exchange 2013.
and setting up the lists and or document library to receive emails using the built in doesn't seem to be working...( maybe not configured correctly, i would need to see what the prior admin/developer did)
But is there a way to get the emails downloaded to a document library using a workflow and or a powershell script that is triggered via workflow?

Hi,
Since workflow can only work on items in SharePoint sites, they cannot get Exchange emails, let alone download emails to SharePoint library. However, you could manually save email to local and upload it to SharePoint list/library.
I'd suggest you toubleshooting the incoming email settings in SharePoint. Please refer to the article below and check your configuration:
https://technet.microsoft.com/en-us/library/cc262947.aspx
http://blogs.technet.com/b/harmeetw/archive/2012/12/29/sharepoint-2013-configure-incoming-emails-with-exchange-server-2013.aspx
Regards,
Rebecca Tu
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Creating a workflow to give permissions to a SharePoint folder using Impersonation Step

Hi There,
I have been tasked with creating a workflow in my organise that will allow our users with (Contributor access) to grant people access upon creating a folder in our Shared Documents library.
Currently when our users create a folder, they need to logged a call with site administrators to granted the relevant people access to the folder and its contents.
Is it possible to create a solution that will kick off automatically upon creation of a folder and allow the Creator Only to grant a subset of users permissions to the folder using the Impersonation Step?
Any suggestions would be highly appreciated.
Regards
Tibz
regards Tibz

Hi There
Thank you for your response.
I managed to create a workflow that can be started automatically upon the creation of a folder in my document library. I then added an Impersonation step where I used the "Remove list Item Permissions" & "Add List Item Permissions" actions.
The challenge I am faced with is on the Remove Permissions action, I want to remove all inherited permissions for all existing users and only leave Users with Full Control. Is there a way to select All Existing Users in one function and perhaps
pass that as a "Selected Users" parameter? Currently I have to select the users/groups individually and there are over 100 existing users/groups to choose from.
Any thoughts on how I can work around this?
regards Tibz

Save conflict while trying to save or publish a SPD 2013 workflow (SP 2013 version)

Hi all, I have a problem while trying to develop a SharePoint 2013 workflow. I'm able to create a new workflow for a list (to save it) and I can confirm that it can run. Unfortunatelly, when I try to modify It (either just after creation or when opening
it later) I get an error while saving or publishing:
Errors were found when compiling the workflow. The workflow files were not saved.
Save conflict
Your changes conflict with those made concurrently by another user. If you want your changes to be applied, click Back in your Web browser, refresh the page, and resubmit your changes.
ULS doesn't show anything helpful but the same message with lots of stack trace pointing to a file save conflict.
Today, by accident I discovered that the workflow could be saved after it was open in SPD for nigth so I expect there may be some time lockout like when you access a document in a library from another domain (hope it's only 30 minutes).
I tried to re register the workflow service and even reinstalling and reconfiguring the workflow manager. This problem was present without the service bus and workflow CU, but now I have them installed as well.
Any suggestions?
Update:
I managed to publish the workflow after performing following steps:
1. Open the workflow and make modifications (save conflict occurs when trying to publish)
2. Reset IIS
3. Publish workflow (the workflow is saved successfuly)
Best Regards Wojciech Wróblewski Visit my blog (in polish):
http://wojciechwroblewski.wordpress.com/

Hi,
According to your post, my understanding is that you got “save conflict” error while trying to save or publish a SharePoint Designer 2013 workflow.
Please check whether the Central Admin > Manage Service Application-> “App Management Service” is started.
Please check whether the “Configure service application associations”, ”App Management Service” is already associated.
Then please check whether the “Manage Services on server” and the “App Management Service” is started.
If all the service are started, add executionTimeout property in web.config file to increase the timeout interval(Make a copy of the web.config file before editing anything).
For more information, please refer to this site:Fixed: SharePoint Designer Error - Unexpected error on server associating the workflow
In addition, if you develop a too complex workflow and try to compile it in SharePoint Designer then you might get the error if your workflow exceeds the complexity limit. To fix the error you will have to redesign and break them into multiple workflows
to achieve the business functionality.
More information:
http://wp.ahcheng.com/2013/03/23/error-were-found-when-compiling-the-workflow-the-workflow-files-were-saved-but-cannot-be-run/
http://www.sharepointpals.com/post/How-To-Identify-Complexity-of-SharePoint-2013-or-2010-Workflow-to-fix-errors-while-compilation
Best Regards,
Linda Li
Linda Li
TechNet Community Support

SharePoint 2013 Workflow Calendar Entry Create Time AM PM Conflict

Windows 2012, SharePoint 2013 Enterprise.
I have a change control form that basically creates a calendar entry once it's been approved. Works well, but discovered a bug with the calendar create portion when there are events that have the same time in AM\PM.
Use case:
1. Create a change control item in the list with a planned start time of 2PM, I'll approve it, which then fires off a workflow and it will create an event in the change control calendar for 2PM, all good.
2. Create another change control item in the list with a planned start time of 2AM this time, I'll approve it, which then fires off a workflow and it will create an event in the change control calendar for 2PM and not 2AM. ???
Yes the original event entry created in the list shows planned start time of 2AM, but its being created in the calendar entry as 2PM. This only happens when the time is exact. For example if I had created the second entry at 3PM, it will create the calendar
entry at 3PM. It only happens if there is an existing entry for the same time, then all subsequent entries for the same time will have the same AM\PM depending on the first entry.
I can manually create an entry in the calendar and specify 2PM and it will take, so its something with the workflow that is causing it. The workflow is very simple all its doing is checking the item to see if the field says approved for the change request
form if so, create calendar event and carry over the fields, planned start time, planned end time, title description, that's it.
James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Hi James,
In my test per your description, I cannot reproduce the issue, however, I attached the screenshot of my test for your reference, let me know if there is misunderstanding.
Please capture the screenshot of your workflow process design so I can try to reproduce or find out if there is action that may cause the issue.
In addition, could you please try to locate workflow error message? If there is obvious error information, please refer to the Activate Workflow Manager Logs part in the article below:
http://blogs.msdn.com/b/vincent_runge/archive/2014/01/07/troubleshooting-actions-for-sharepoint-2013-workflows.aspx
Regards,
Rebecca Tu
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Custom SharePoint 2013 workflow activities in site template throw error on site creation

Hi all,
I have created a number of custom activities for SharePoint 2013 Workflows and I am using them on an Office 365 environment. The custom activities are packaged as a sandbox solution and deployed on my Office 365 site. Everything works as expected.
I have now created a site with all the functionality I need, including some Site and List workflows - all of them containing my custom activities. I saved the site as a template - including content - and the process was completed successfully.
My problem is that when I try to create a site based on that template, I get the following error:
Microsoft.Workflow.Client.ActivityNotFoundException: The activity named 'WorkflowXaml_66b9230b_823e_4783_82b8_daf481237847' from scope '/spo/d42a4487-9465-4347-9f2c-a2718e92fc02/74d0f9e7-fb35-493d-86fb-ab7aa27da7e0/c2e1bf45-cf67-4e13-9755-421cf92395f8'
was not found. HTTP headers received from the server - ActivityId: 0997496a-5a15-4b83-82eb-727881eefa67. NodeId: . Scope: . Client ActivityId : c82f6e9c-9f8f-808b-7679-f2c0f92a339d. ---> System.Net.WebException: The remote server returned an error
After a number of trials and errors, I am certain that this relates to my custom activities. i have already tested all of the following scenarios:
Delete the workflow with the custom actions: Site is created successfully.
Create a new workflow with no custom actions and save the site as a template:
Site is created successfully.
Save the site template including a workflow with my custom activities, but not including content:
Site is created successfully, but my workflow is not there.
Create a new custom workflow activities sandbox with one custom activity that just writes something to the history list - just to make sure that this is not related to any specific solution. Save the site as a template:
Site creation throws the same error.
Packaged my workflow (with my custom activities) as a wsp from SharePoint Designer and deployed it as a custom solution. Activated the feature in the target site. The workflow gets created and executing finally. Saved the site as template: Site
creation throws the same error.
Same as above, but without activating the feature in the target site: Site created successfully, workflow works fine after I activate the feature in the new site.
My custom activities feature is always enabled in the site I save as template - in all of the above scenarios.
I have tested all of the above scenarios both on SharePoint 2013 on-premise and Office 365. There is
a forum post regarding some inconsistencies in the wsp file, but unfortunately this is not my case. Am I doing something wrong? Are custom 2013 workflow activities not supported in site templates - which would not actually make any sense, as it would "break"
the fundamental concept of re-usability.
Any ideas/feedback/guidance?
Thanx in advance

Hi,
I am facing the same issue. Kindly help me out if any of them have solved similar issue.
Your help would be appreciated.
manikantan

SharePoint 2013 Workflow (SPD 2013) fails for Active Directory Group members

Hi
I have a SharePoint 2013 site called "Team Meetings". There are a number of lists and an InfoPath form library.
The site's SharePoint Group "Team Meeting Members" has two Active Directory groups (All Club Managers and All Club Police) as members. Those two AD groups contain all the people that I want to have access to the library and list, except for
a few additional folk who I have made individual members.
My PROBLEM:
I have created a SharePoint 2013 Workflow using SPD 2013 associated with the Form Library. Workflow is set to start on new or modified item. The first action is to write to history list, then determine the status (Submitted or Pending) of
the form and go to different Stages depending on that status.
The workflow works perfectly for any user who has been added directly to the SharePoint group (Team Meetings Members) BUT FAILS at the very first action for anyone who is a member of one of the AD groups. I know the Workflow is fine because I've tested it
with numerous people who are direct members of the SharePoint Group, but whenever a person who is a member of the AD group tries it the Workflow just fails.
Here's a print of the info from the Workflow Status page (I don't have access to server logs):
RequestorId: 4494760f-92ff-2e8c-90d2-cc7df0e6baa4. Details: System.ApplicationException: HTTP 401 {"Transfer-Encoding":["chunked"],"X-SharePointHealthScore":["0"],"SPRequestGuid":["4494760f-92ff-2e8c-90d2-cc7df0e6baa4"],"request-id":["4494760f-92ff-2e8c-90d2-cc7df0e6baa4"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"MicrosoftSharePointTeamServices":["15.0.0.4420"],"X-Content-Type-Options":["nosniff"],"X-MS-InvokeApp":["1;
RequireReadOnly"],"Cache-Control":["max-age=0, private"],"Date":["Mon, 10 Mar 2014 01:31:42 GMT"],"Server":["Microsoft-IIS\/8.0"],"WWW-Authenticate":["NTLM"],"X-AspNet-Version":["4.0.30319"],"X-Powered-By":["ASP.NET"]}
The HTTP response content could not be read. 'Error while copying content to a stream.'. at Microsoft.Activities.Hosting.Runtime.Subroutine.SubroutineChild.Execute(CodeActivityContext context) at System.Activities.CodeActivity.InternalExecute(ActivityInstance
instance, ActivityExecutor executor, BookmarkManager bookmarkManager) at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor
Members of the SharePoint Group "Team Meetings Members" have Contribute Access to both the form library and another list that the workflow writes to as well as the Workflow History list (which in SP 2013 uses the credentials of the
user who started the workflow, unlike 2010 which used System Account).
All members of the Team Meetings Members group, whether they are individual members or part of one of the AD groups, have no problems opening and saving forms etc. It's just the Workflow that doesn't like them...
I am stumped. I've spent many hours searching for a reason for this. There are about 200 people in the two AD groups so I really don't want to have to add them all individually - especially when these groups are managed in AD for a whole bunch of other reasons
and using the AD groups means I'll basically never have to worry about modifying the SharePoint access permissions.
Does anyone have any ideas why this is happening and what I can try to fix it?
Mark

Hi Lars,
I'm afraid not so far but we are trying a few things today so I will post back with results.
First thing we are doing is making the AD Group universal because one of our (external provider) gurus remembers seeing something about that. He also sent me a link to a post where they were talking about earlier
versions but having similar issues and their solution was to make sure the app pool account has sufficient permissions in AD::
http://social.msdn.microsoft.com/Forums/sharepoint/en-US/27a547da-5cc0-49d7-8056-6eb40b4c3242/failed-to-start-workflow-access-is-denied-exception-from-hresult-0x80070005-eaccessdenied
This part of that thread looks interesting but we haven't checked it yet as were trying the universal setting first:
"If the users participating in the workflows have been added to the SharePoint site via Active Directory groups, SharePoint has to update the user’s security token periodically by connecting to
the domain controller. By default, the token times out every 24 hours. But if the application pool account did not have the right permissions on the domain controller to update the user’s token, user will keep getting the access denied error. The error was
intermittent because when the user browsed to any page other than the workflow form, the token was getting updated successfully.
You can try to fix it through granting the application pool account the appropriate permission by adding the account to the group “Windows Authorization Access Group” in Active Directory."
I'll update when we try these ideas. If you have any luck please do the same.
Mark
(sorry about formatting - using my phone....)
Mark

Simple 2013 Workflow to break permissions inheritance on a Document Library File?

Similar Messages

Maybe you are looking for