You don't have Add and Customize Pages permissions required to perform this action - but i do!

Question

Hello.
I am having a similar problem to the one described by this post here:
http://kiruthik.com/2010/10/05/YouDontHaveAddAndCustomizePagesPermissionsRequiredToPerformThisAction.aspx
However, his resolution of changing web.config under wwwroot did not fix my issue.
Here is the situation on a recently upgraded SP2010.
1) Create a document library. Set the document template to "basic page"
2) give a user full control on the document library.
3) Go, under that users credentials, to the document library and create a new document.
4) Name the document whatever and hit create
5) a page is displayed which says the following: "Web Part Error:
A Web Part or Web Form Control on this Page cannot be displayed or imported. You don't have Add and Customize Pages permissions required to perform this action."
6) Become confused as giving someone "full control" on the library should obviously inherit the permissions to when they create a document and try and edit it.
If i give the user "full control" on the entire site (site actions -> site permissions), then the document pops open an editor which would allow you to add content to the basic page. Obviously, i do not want to give users full control to the
entire site :)
Giving the user  "Add and Customize Pages" permissions on the entire SITE allows them to edit get the popup to edit the file, but this is not desireable either since then they could "Add, change, or delete HTML pages or Web Part pages,
and edit the Web site using a Windows SharePoint Services-compatible editor.". I do not want them to edit any web pages, i just want them to edit a particular lists webpage!
Things i have tried:
- Set the permissions on the "MSContentEditor" webpart to have the user have full control of the web part.
- set the permissions on ALL the web parts to have the user have full control (permissions on the web parts list)
- Edited web.config to add a line to mark "contentEditorWebPart" as safe, and then restarted IIS.
- Recreated test lists and was able to duplicate the behaviour
So I am wondering, is this a sharepoint bug or what? Should a web part not inherit the permissions of the list it is working in? if not, what are the exact items i need to set permissions on to get this webpart to display correctly?
Setting global site permissions is not an option.
Another workaround is to make a "wiki page library" which allows you to copy and paste text into a static page, and also edit that text. I can move all the content over to a "wiki page library", and thats what i probably will end up doing
in the end, but its annoying because there is alot of content to move, and it all has to be done by hand as you cannot upload documents to a wiki afaik. Also the wiki uses a different editor, its inline instead of a popup in IE which is probably why it is
working.
This may not be a bug and could be a simple permissions problem or something else, but i have been looking at this for hours and it doesnt make any sense to me.
Any help appreciated thanks!

Answer 1

Hi,
Yes, you must have “Add and Customize Pages” permission
from site level to perform this action, the permission is not in list permission level.
You can add a new permission level which only includes “Add and Customize Pages” permission, and then create new SharePoint group with this permission
level.
Add the users into the SharePoint group and these users will get the “Add and Customize Pages” permission
from site level.(site permissions)
Additionally to add/edit page, the users also need the permission level “Contributor” in list permission level.
(you should know when you grant the full control to the users in list permission level, the users won’t get the permission from site level)
If you need further help, please let me know.
Hope this helps
Thanks!
Stanfford
Everything will be fine.