Forum Discussion
User hover cards causing Team/Group Guest users SharePoint access issues.
StephenRice - tagged you but not sure who else I might tag to on SharePoint team :).
Don't know if you guys have this on your radar or not, but there was a Teams post going on about guest access users not being able to see documents via the "Open in SharePoint" link. But I also think this might be affecting other area's in general possibly.
Anyway, I setup a test tenant site and invited my main account as a guest and then try to access documents inside of SharePoint and the page will load, then a prompt will come up asking for login. The other tenant where this discussion is going on will redirect to access request pages.
Culprit I believe is the new Hover Card feature. I did a Console as the page loads and you will see the last place it hits is file hover which I'm guessing is what is causing this fiasco. Anyone else having this issue with Guest users that wants to confirm their experience? Been able to reproduce similar results in 3 tenants now.
*Temporary Fix* - If you are having this issue and have a Team/Group with Guest users accessing "Open in SharePoint"/SharePoint site as a guest, you can go to the Library Settings, and edit the default view and make sure you don't have "Modified by" or "Created By" columns showing in the view. This will allow them to use it temporarily.
22 Replies
Same issue, just posting to keep Microsoft honest here.
With the push for B2B and SPO as an external collaboration tool this is a major fail / testing oversight.
- Well Microsoft updated the Service Advisory and posted that it was almost fixed but they found some major bug with it. So now next estimated fix will be in place by Next Friday. Hopefully so, this bug is getting annoying with support requests on my end :).
"Current status: We've identified an issue contained in the fix that was not discovered during testing, which has the potential to cause more severe service impact if fully deployed. We're reverting the fix to prevent additional impact, and will produce a new version that avoids this problem. We anticipate that the new fix will be ready for deployment by Friday, May 18th, 2018."
I have the same issue where users are getting continuous prompt to login again in modern team site using guest access. I cannot remove all the user cards from the complete site. Waiting for the resolution
I have a similar issue that could be related to this error. A brand new Office 365 group shared with an external users shows a windows authentication box. The external user can access the content, but some rollup images in the news webpart are not shown.
The network trace show that the browser is trying to access the following url at the sharepoint.com rootsite:
<tenant-rootsite>/_api/sphomeservice/context?$expand=Token,Payload 403 (Forbidden)
The external user however does not have any access to the tenant rootsite collection.
We have the same issue with authentication prompts for external users using the Communications site template. As mentioned previously, disabling comments on pages and removing the modified by columns in document libraries prevents the prompts but it would be good if the issue was fixed so we can use these features.
Just a little more. Going to a homepage of a Site/Tenant I'm a guest of and was getting "Access denied page(request access). I quickly got in an edit of the home page and turned off "Comments" at the bottom of the page and the page now renders without getting denied message. This comment at the bottom has a People hover card on it. So definatley related. These hover cards load with the doc. lib "modified" columns so errors there towards end of the render.
Anyway, hate bugging Mark-Kashman but just wanted to let you know, this seems is probably affecting all guest access access to Most SharePoint Online pages, at least from Teams for sure :).
- StephenRice
Microsoft
Hey Chris,
Thanks for flagging this. I'm not sure what's going on but I'll forward this thread internally and we'll see if we can figure it out. Thanks!
Stephen Rice
OneDrive Program Manager II
