Users cannot access Document Library althouth they have Edit permissions
Hello,
I have a strange SharePoint 2013 case, or at least it's strange to me.
Users from the company cannot access a Document Library although I've granted them Edit permissions. The Inheritance from the parent have been broken, all inherited groups have been removed and all users have unique permissions to this library. Here is the
setup:
Web App -> Sub Site A -> Sub Site B -> Sub Site C -> Sub Site D -> Library
So these users have Read access from the Web App down to Sub Site B. They cannot see Sub Site C and D because these sites are also with broken inheritance and unique permissions. But I've granted Edit permissions for these users to the Library.
If I assign View permissions for these users to the Sub Site D then they can upload and edit documents in the library, but still cannot see Sub Site C which was my intention anyway. Again i don't want them to see Sub Site D either, but if i remove the View
permissions they can't access the library.
On SP 2010 this was not an issue. I'm not sure if here the permissions are different or not, but I've never seen such issue before.
Any ideas will be much appreciated. I hope the explanation is good enough to describe the issue.
Many Thanks in advance.
Ivo
Hi Ivaylo,
According to your description, my understanding is that the user with only Edit permission on the library cannot access the library.
I recommend to check if the Limited-access user permission lockdown mode feature is deactivated in root site.
If it is not, deactivate it and then test to see if the issue still occurs.
To deactivate the feature, please go to the root site > Site Settings > Site collection features > deactivate Limited-access user permission lockdown mode.
Best regards.
Thanks
Victoria Xia
TechNet Community Support
Similar Messages
-
I am in the final stages of a cross-forest migration. Users have Windows 7 workstations with redirected folders on a Windows Server 2012 box running in the old forest. User accounts were not migrated. The accounts in use have always
been in the "new" forest. One of our challenges was the large volume of data in redirected folders. I made sure users in the target forest had continued to have access to their redirected folders in the old forest and robocopied
the entire users share, copying the permissions with the files. By doing incremental robocopies, we can get a final copy done now in about six hours. The plan was simple: copy the files, do an incremental copy every night, on the night of the cutover
change the folder redirection policy Documents path from
\\oldserver\users\%USERNAME% to
\\newserver\users\%USERNAME%. The policy is configured to NOT copy user files from the existing folder to the new redirected folder. Everything was going well until I tested the policy change. After the folder redirection policy is updated
and applied, the user cannot access the private Documents folder. For example, user Chester Tester logs on as ctester. I open Windows Explorer and click the Documents shortcut. I see one subfolder, which is subfolder of Public Documents.
So I can look at Public Documents but when I click on the Documents folder (Under the Documents library link) I get an access denied error. Now for the kicker, if I open another Windows Explorer window and edit the address bar to
\\newserver\users\ctester, I can navigate the Documents folder tree and see my thousands of documents. What the ....?
I'm hoping this is something really simple to fix!
TIAHI Vivian,
Thank you for your reply. Yes, the path in Group Policy Folder Redirection Root Path was updated to
\\NEWSERVER\users. I had planned to point this to the distributed file system, so the first used was actually
\\domain\dfs\users. To simplify things I have backed off to copying to just a normal share
\\newserver\users.
We are using BASIC folder redirection and we create a folder for each user under the root path.
We did not want the policy to move content, as we were seeing users requiring 15-20 minute logon times (or higher) after the policy is changed.
Grant the User exclusive right to Documents - Disabled
Move the contents of Documents to the new location - Disabled
Related folder settings
Video - Follow Documents
Music - Follow Documents
Pictures - Follow Documents
Now when I change the folder redirection from old server to new server I now have TWO My Documents folders in the user's redirection folder on the server. The redirected Documents points to an empty folder set. The copied folders with all user
data are there, but folder redirection refuses to recognize the original folder.
I am looking at the full view of the folder, nothing hidden, so I'm wondering how a folder can have two subfolders with the exact same name. For now, I just want the redirection to move from the old server to the new server properly. I deleted
the new My Documents folder, rebooted the user's workstation and tried again. The behavior repeats itself, i.e., a new My Documents folder is always created when the redirection policy is changed from the old server to the new server. The environment
has about 1500 users with approximately 1.3TB of data in the redirected Documents folders. OUCH! -
I have inadvertently changed a file permission setting. When opening Aperture I get the following; "Aperture cannot access this library. To use this library make sure it's file permissions are set correctly". I am an old dude new to Mac OS. Looked in settings but have no idea how to allow file sharing to myself. I have been using Aperture actively for 6 weeks. I'm the only one using this Mac. What up?
Back up all data now.
This procedure will unlock all your user files (not system files) and reset their ownership and access-control lists to the default. If you've set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. If none of this is meaningful to you, you don't need to worry about it.
Step 1
If you have more than one user account, and the one in question is not an administrator account, then temporarily promote it to administrator status in the Users & Groups preference pane. You can demote it back to standard status when this step has been completed.
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Drag or copy — do not type — the following line into the Terminal window, then press return:
sudo chflags -R nouchg,nouappnd ~ $TMPDIR.. ; sudo chown -R $UID:20 ~ $_ ; chmod -R -N ~ $_ 2> /dev/null
Be sure to select the whole line by triple-clicking anywhere in it. You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. You don't need to post the warning. If you don’t have a login password, you’ll need to set one before you can run the command.
The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear, then quit Terminal.
Step 2
Boot into Recovery by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
When the OS X Utilities screen appears, select Utilities ▹ Terminal from the menu bar. A text window opens.
In the Terminal window, type this:
resetpassword
That's one word with no spaces. Then press return. A Reset Password window opens. You’re not going to reset a password.
Select your boot volume ("Macintosh HD," unless you gave it a different name) if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select ▹ Restart from the menu bar. -
I have a macbook pro w exisitng iPhoto library. I now have Canon printer and loaded Canon software for same. I cannot access iPhoto library for use from Canon software. I can print from iPhoto directly to new printer without problem. How can I use iPhoto library with Canon software? I would like to try the software to see which I prefer...
Simply export some photos from iPhoto to a folder on the desktop and experiment.
Without telling us even what this program is, not to mind what it does, that's the best anyone can suggest.
Regards
TD -
I have just updated my iPad and now cannot access any apps as they just close down straight away. Any ideas why and how to solve?
Have you tried a reset ? Press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.
I've also seen it suggested that people try downloading a free app from the store onto the iPad (as that seems to reset something), and then re-try the apps - the free app can then be deleted. -
The hard drive on my MacBookPro recently crashed. The Apple store replaced it. Since then I can't open iphoto. It asks to rebuild library; when I click yes, I get: "Aperture cannot access this library; reset permissions." I don't own Aperture! Any thoughts on how I can rebuild the iphoto library? Currently I can't even get into it.
Back up all data. Don't continue unless you're sure you can restore from a backup, even if you're unable to log in.
This procedure will unlock all your user files (not system files) and reset their ownership and access-control lists to the default. If you've set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it.
Step 1
If you have more than one user account, and the one in question is not an administrator account, then temporarily promote it to administrator status in the Users & Groups preference pane. To do that, unlock the preference pane using the credentials of an administrator, check the box marked Allow user to administer this computer, then reboot. You can demote the problem account back to standard status when this step has been completed.
Triple-click the following line to select it. Copy the selected text to the Clipboard (command-C):
{ sudo chflags -R nouchg,nouappnd ~ $TMPDIR.. ; sudo chown -R $UID:staff ~ $_ ; sudo chmod -R u+rwX ~ $_ ; chmod -R -N ~ $_ ; } 2> /dev/null
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window (command-V). You'll be prompted for your login password. Nothing will be displayed when you type it. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.
The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear, then quit Terminal.
Step 2 (optional)
Take this step only if you have trouble with Step 1 or if it doesn't solve the problem.
Boot into Recovery. When the OS X Utilities screen appears, select
Utilities ▹ Terminal
from the menu bar. A Terminal window will open.
In the Terminal window, type this:
res
Press the tab key. The partial command you typed will automatically be completed to this:
resetpassword
Press return. A Reset Password window will open. You’re not going to reset a password.
Select your boot volume ("Macintosh HD," unless you gave it a different name) if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select
▹ Restart
from the menu bar. -
Tried to update my itunes and it says "iTunes installed incorrectly" now i cannot access my library
tried to update itunes and it says after download "iTunes installed incorrectly" now I cannot access my library.....HELP!!
Go to Control Panel > Add or Remove Programs (Win XP) or Programs and Features (later)
Remove all of these items in the following order:
iTunes
Apple Software Update
Apple Mobile Device Support (if this won't uninstall move on to the next item)
Bonjour
Apple Application Support
Reboot, download iTunes, then reinstall, either using an account with administrative rights, or right-clicking the downloaded installer and selecting Run as Administrator.
The uninstall and reinstall process will preserve your iTunes library and settings, but ideally you would back up the library and your other important personal documents and data on a regular basis. See this user tip for a suggested technique.
Please note:
Some users may need to follow all the steps in whichever of the following support documents applies to their system. These include some additional manual file and folder deletions not mentioned above.
HT1925: Removing and Reinstalling iTunes for Windows XP
HT1923: Removing and reinstalling iTunes for Windows Vista, Windows 7, or Windows 8
tt2 -
Error Message - "Aperture cannot access this library"
I'm using OS 10.5.7 and Aperture 2.1.3. I recently had an error message pop-up when I try to start Aperture that says, "Aperture cannot access this library. To use this library, make sure its file permissions are set correctly." Unfortunately, I can't seem to open up my library. Any ideas how to fix this or what is wrong? Thanks
Hello,
attached I would like to report how the problem solved.
1. I had 63 Minute Call to Apple Support and we are tring some things. Finally I Spend spend 1 day for testing.
2. Testing procedure:
A) I exported each project step by step
B) Than I deleted all appr. 50 projects in Aperture Library.
C) After that I Imported each project to Aperture back.
Result: 2 Project was corrupted, one of it was going well after export/import procedure how ever but the second ones error was constant appearing if I try to import it. The project consisting of 512 jpg files in total appr. 500MB.
The solution for this project:
I moved this jpg´s to waste bin und imported it from waste bin to Aperture again into a new project. Than I tested it again(Export/import) and it was fine.
For final check I delete my Aperture backup und start a new one.
Than start a compleate restoring from that last backup.
Every thing was fine, all project include albums or books are ok.
The pictures in the corrupted project was not imported by Aperture, they was created on a PC system(XP). Maybe that was the reason for the problem.
A friend sad, that windows use not the agreed standard for jpg´s.
I don´t know. So I´m happy all my books are back that is imported for a wedding photographer.
Have fun
bernhard66 -
PIX Users Cannot Access Other Websites & Email Servers on Same-Shared T1 Co
We are sharing a T1 connection with another business in our building. They have their own separate network environment from mine. I have a Windows 2003 Small Business Server behind a PIX-501 and the users in my network connect to the Internet via Windows Server?s DHCP and Internet sharing (NAT) services.
All Internet and email traffic is accessible except for those hosted by the other company who we're sharing a connection with. My users cannot access that company?s web server or send email to their email server (we all get 4.4.7 SMTP errors? days later after sending the message).
They have no firewall on their end; which is why I think there may be something wrong with my PIX configuration (see attached config file). I'm sort of a newbie with the PIX CLI, so any help I can get could be great. Thanks in advanced!The problem is not with PIX. This is a common problem when sharing a T1 link as it creates a routing problem since routing cannot be done based on shared T1 channels. Your PIX config is fine and has nothing to do with this issue.
-
Computer clock that user cannot access
I have made a game that i published on Kongregate using C# language with Unity.
I have a serious issue though. If the player stays offline, he gets some bonus in game when he returns. The more he is offline the bigger bonus. The issue is that if someone while he is offline changes the clock of his computer to 1 day or 10 years in the
future he gets so much bonus that he ruins the game.
Is there any way to avoid that without having a server to get time?
In the webplayer i cannot use NTP due to security limitations, so i am trying to find a clock that the user cannot access.
Thanks in advance for any possible answers!The software house where I'm working as a phone app which uses a timestamp on data it sends to a server.
There are frequent issues with users messing with the time on their devices for games like candy crush.
This causes no end of problems since you get data which is sent as if it happened like yesterday or some such and bad stuff happens.
You definitely don't want to rely on the time on the users computer.
Get the time when you start up or support bonus for save to server only and apply it retrospectively.
Use a timer to see how long they play between saves if necessary.
Or change the game and ditch the bonus mechanism.
Hope that helps.
Technet articles: Uneventful MVVM;
All my Technet Articles -
hi,
i am new to this forum,i have one doubt,
user cannot access one authorization field , how can i analysis this issue, i know su 53 for find the authorization field...but user have 100 roles... how can i find the which role and object...plz help me..Hi Hassan,
This is not the correct category. This message should be opened under security item. However, you can find the whole required authorization objects list, by using ST01 trace.
Best regards,
Orkun Gedik -
Non-admin user cannot access Essbase server level variables
Version 11.1.1.3
Essbase Substitution variables are created at server level. Users are getting error in FR report that uses the Subsitution Variable -- Essbase Error(1051085): You do not have sufficient access to get this substitution variable. Also, users cannot access Substitution variable in SmartView. However, users can access variables created at database level. Users are provisioned as "Server Access" to Essbase and filter access to ASO application "MGTRPTG", where MGTRPTG is an ASO essbase application for reporting. We tried the same provisioning in two other environments and it seems to be working fine.
User is type "Essbase and Planning" provisioned with essbase "server access", application mgtrptg "filter", Reporting and Analysis "analyst", "dynamic viewer" and "Explorer". In addition, it is given a filter "REP_DME_GALB" which restricts 2 dimensions (Division and Geography).
Steps taken to resolve:
1. Existing users were deprovisioned and reprovisioned with no effect.
2. Created brand new identically provisioned users in Prod and QA. QA user can access the server level var and Prod user cannot
3. Created a brand new server level variable in Prod and this cannot be accessed.
4. All services have already been restarted several times.
5. SR has been opened.
Temporary workaround:
By creating a duplicate of the same set of variables at the database level, the reports work. This can only be a temporary workaround as the client cannot be expected to maintain two sets of substitution variables since there are 3 applications using these server level variables.
Thank you for any ideas!
JenniferYou have stumbled on a defect which is resolved in the Hyperion Planning 9.3.1 patch 6 and above. If you have your planning preferences set to indent members it will cause forms which have page selections to show as invalid in SmartView.
You can either patch Planning or turn off the preference. The patches are available from http://metalink3.oracle.com and require account which has been associated with your client ID.
P.S. Usually it's not a good practice to use the admin id.
Regards,
-John
Edited by: Jbooth on Nov 3, 2008 2:12 PM -
I cannot access Content Library in iMovie - Content Library doesn't show on the iMovie screen and is greyed out when accessed through "windows" tab at the top. Also unable to update the projects/events (a suggested solution for a similar question). I haven't had this issue before, I have always used the content library on the screen but haven't used this for about a month. How can I make the Content Library available?
Thanks so much! I am backing up the entire computer now with an external hard drive - this should be fine right? And surely if I am backing up the whole computer these projects/videos will be backed up too? I wasn't sure how to do this any other way and I am clearly not great with tech issues. Once this is done and I am sure my projects/videos are safe I will do the delete and reinstall bit. Thanks for taking the time to help
-
Sign out of one itunes account and sign into another seperate itunes account on same macbook. Cannot access itunes library for 2nd account. How do I do this?
iTunes account is not the same as iTunes library.
iTunes account is what you use to purchase from iTunes.
iTunes library is what is on your computer.
You can have items from multiple iTunes accounts in one iTunes library. -
Aperture won't start up (cannot access this library)
When I try to open Aperture I am getting a message straight away saying:
*Aperture cannot access this library*
+To use this library, make sure its file permissions are set correctly.+
I cannot find a way to do this. I have restored the disk permissions but that hasn't helped.
Any help would be greatly appreciated.
ChrisThanks for the help guys.
I had already done the Get Info idea with no luck.
I ran the Consistency Check for a good 24 hours, in which time it never got above 75% and didn't seem to be doing much. Following other forum posts I quit that and ran the 'Rebuild Library' function from the same menu. After an hour or so this seemed to have done the trick and the program had launched. I then did Consistency Check as well to be on the safe side, which it did a lot faster. Everything now seems good.
Thanks again.
Chris
Maybe you are looking for
-
Copied a program from 4.1 to 8.2 recently and receive an error 7: File not found at open file+.vi. The program is built so a file dialog will pop up and ask for the destination of the file. Eventhough there is a file in the specified directory, an
-
Can I have a separate apple ID accounts? One for my iphone, and one for my ipad?
This may be a stupid questions but, I don't want everything on my ipad on my iphone. Can I make two separate apple ID accounts? how will that affect my itunes account on my laptop/macbook?
-
I bought my magic mouse a few months ago and it was working great until about 2 weeks ago, it now decides to disconnect at random times, and the green light won't come on underneath the mouse meaning i have to turn my computer on and off several time
-
hi Gurus i want to implement digital signature functionality on form 16. plz tell me the whole process. we are on ECc6 sysytem. currently our user has to manually sign the whole documents and this is a very time consuming process. plz give ur valuabl
-
Report-Painter: 2 Data sources in 1 Report
Hello members, I want to read in one step from database and archive simultaneous in a report, created by report-painter. The problem is, the checkbox can not be enabled for both sources (archive + database) together. Or, is it possible to transfer to