Forum Discussion

Tomislav Karafilov's avatar
Tomislav Karafilov
MVP
Jun 27, 2017

NewDocSet.aspx - Access denied when calling from permission interrupted sub website

I have a website collection for the managing directors with very restricted access. There is a content type defined, based an a document set. In a sub website, I have created a document library and added the document set content type. I have interupted the permisson inheritense on the sub website an on the containing document library. Giving a user permissions for the doc lib, he can see the lib and go into the document sets but he gets access denied, when he wants to create a new document based on the document set content type defined in root. The URL shows access denied to the NewDocSet.aspx in the _layout folder.

I did not find place, giving spezial permissions to the aspx file. So what can I do to enable users to generate new document sets in the sub site?

Document Library
Permissions
sharepoint server

2 Replies

  • Bruno Aleixo's avatar
    Bruno Aleixo
    Icon for Microsoft rankMicrosoft
    Jun 28, 2017

    im unable to reproduce the issue on my env. Can you please open a suppor ticket ?

    • Tomislav Karafilov's avatar
      Tomislav Karafilov
      MVP
      Jun 29, 2017

      I have researched something further:

       

      I have a WebSiteCollection and a SubWebSite. In the root site I create a content type based on document sets. Inside the SubWebSite I add this content type to the default document lib. The permission inheritance from root to sub site is interrupted.

      Now I give contribute access to a test user to the document lib only. No acces to root, no acces to sub, only document lib access. When the user calls the link directly to the doccument lib, he can see the documents. When he now wants to create a document set, he gets the access denied to the _layouts... NewDocSet.aspx site. When I now add the test user to a new created WebSite group with minimum rights (Display only), than the user gets the possibility to access the NewDocSet.aspx page and he could create a document set. But he could also see the web site content and see the other libs and list. I don't want this, so for every libs and list I break the WebSite permission inheritance and remove the newly generated group containing the test user. Now the test user sees the other libs in the web site content page, but could not access the lists.

      Not nice, but works!