On InfoPath form submission an erroneous Access Denied message shows

%3CLINGO-SUB%20id%3D%22lingo-sub-289139%22%20slang%3D%22en-US%22%3EOn%20InfoPath%20form%20submission%20an%20erroneous%20Access%20Denied%20message%20shows%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289139%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3ESystem%3A%3C%2FP%3E%3CUL%3E%3CLI%3EOffice%20365%20(SharePoint%20Online)%3C%2FLI%3E%3CLI%3EInfoPath%202013%20with%20data%20connection%20to%20Form%20lib%20and%20incoming%20data%20connection%20to%20a%20list.%20InfoPath%20submission%20button%20submits%20changes%20using%20a%20submit%20data%20connection.%26nbsp%3B%3C%2FLI%3E%3CLI%3ESharePoint%20Designer%202013%3C%2FLI%3E%3CLI%3ETested%20on%20Windows%2010%20or%20Windows%207%3C%2FLI%3E%3CLI%3ETested%20on%20Edge%2FChrome%2FInternet%20Explorer%2FFirefox%3C%2FLI%3E%3CLI%3EPermissions%20are%20granted%20by%20a%20SharePoint%20Designer%202013%20workflow%2C%20particularly%20by%20a%202010%20add%2Fremove%20permissions%20function%20within%20the%202010%20wf%20which%20has%20worked%20for%20months%20without%20problem%20until%20a%20few%20months%20ago%20(WITH%20NO%20CHANGE%20TO%20IT!)%3C%2FLI%3E%3C%2FUL%3E%3CP%3EThe%20problem%3A%3C%2FP%3E%3CP%3EOn%202%20or%203%20InfoPath%20and%20SharePoint%20Designer%20based%20form%20and%20workflows%2C%20situated%20on%20SharePoint%20Form%20Libraries%20an%20Access%20Denied%20message%20appears%20when%20a%20form%20is%20submitted.%20The%20strange%20thing%20is%20that%20the%20form%20is%20submitted%20successfully%20with%20no%20problems.%20Another%20strange%20characteristic%20is%20that%20the%20user%20gets%20the%20Access%20Denied%20message%20the%20first%20time%20they%20submit%2C%20but%20a%20second%20time%20it%20doesn't%20appear.%20They%20can%20submit%20without%20encountering%20the%20message.%20Hope%20this%20gives%20a%20clue.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20end%20user%20(the%20one%20who%20receives%20the%20email%20to%20action%20the%20form)%20will%20receive%20a%20SPD%20generated%20email%20and%20will%20click%20on%20an%20encoded%20absolute%20URL%20which%20takes%20them%20directly%20to%20the%20form.%20They%20then%20change%20the%20form%20and%20click%20Save.%20The%20whole%20thing%20is%20a%20glorified%20Approval%20process.%3CBR%20%2F%3EOnce%20the%20form%20is%20saved%20with%20the%20changes%20it%20then%20should%20show%20'This%20form%20has%20been%20closed'%20or%20something%20along%20those%20lines%2C%20yet%20it%20shows%20Access%20Denied.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20spent%20several%20hours%20on%20the%20phone%20to%20a%20Microsoft%20support%20technician%20who%20I%20have%20been%20able%20to%20recreate%20the%20issue%20to.%20He%20spent%20a%20long%20time%20trying%20to%20figure%20out%20what%20is%20wrong%2C%20circling%20back%20to%20permissions%20settings%20but%20has%20decided%20that%20it%20is%20not%20a%20permissions%20based%20issue.%20I%20also%20agree%20because%20this%20particular%20system%20we%20tested%20it%20on%20worked%20without%20problem%20for%20months%20until%20a%20few%20months%20ago%20when%20this%20problem%20just%20started%20out%20of%20nowhere.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20ITS%20managed%20and%20unmanaged%20PC's%20here%20at%20our%20organisation.%20Managed%20means%20there%20are%20security%20policies%20pushed%20down%20to%20client%20PC's%20where%20most%20are%20still%20Win7%20but%20increasingly%20Win10.%20We%20tested%20on%20both%20Managed%20and%20Unmanaged%20Win7%20and%20Win10%20with%20all%20browsers%20and%20it%20occurs%20on%20all%20so%20it%20potentially%20eliminates%20security%20policies.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20Access%20Denied%20message%20is%20attached.%20Please%20remember%20that%20it's%20not%20a%20permissions%20thing%20-%20we've%20checked%20Limited%20Access%20permission%20groups%2C%20checked%20if%20the%20permissions%20are%20being%20incorrectly%20set%20by%20the%20workflow%2C%20(they%20are%20not).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyone%20help%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-289177%22%20slang%3D%22en-US%22%3ERe%3A%20On%20InfoPath%20form%20submission%20an%20erroneous%20Access%20Denied%20message%20shows%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289177%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Peter%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%20but%20that%20reveals%20little%20to%20me.%20Can%20I%20send%20them%20directly%20to%20you%3F%20I%20will%20black%20out%20any%20sensitive%20data.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EC%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-289159%22%20slang%3D%22en-US%22%3ERe%3A%20On%20InfoPath%20form%20submission%20an%20erroneous%20Access%20Denied%20message%20shows%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289159%22%20slang%3D%22en-US%22%3E%3CP%3EPresume%20you%20have%20used%20the%20developer%20tools%20in%20your%20browser%20to%20see%20if%20it%20shows%20what%20call%20is%20failing%20when%20you%20get%20the%20access%20denied%20error%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi,

System:

  • Office 365 (SharePoint Online)
  • InfoPath 2013 with data connection to Form lib and incoming data connection to a list. InfoPath submission button submits changes using a submit data connection. 
  • SharePoint Designer 2013
  • Tested on Windows 10 or Windows 7
  • Tested on Edge/Chrome/Internet Explorer/Firefox
  • Permissions are granted by a SharePoint Designer 2013 workflow, particularly by a 2010 add/remove permissions function within the 2010 wf which has worked for months without problem until a few months ago (WITH NO CHANGE TO IT!)

The problem:

On 2 or 3 InfoPath and SharePoint Designer based form and workflows, situated on SharePoint Form Libraries an Access Denied message appears when a form is submitted. The strange thing is that the form is submitted successfully with no problems. Another strange characteristic is that the user gets the Access Denied message the first time they submit, but a second time it doesn't appear. They can submit without encountering the message. Hope this gives a clue.

 

The end user (the one who receives the email to action the form) will receive a SPD generated email and will click on an encoded absolute URL which takes them directly to the form. They then change the form and click Save. The whole thing is a glorified Approval process.
Once the form is saved with the changes it then should show 'This form has been closed' or something along those lines, yet it shows Access Denied.

 

I have spent several hours on the phone to a Microsoft support technician who I have been able to recreate the issue to. He spent a long time trying to figure out what is wrong, circling back to permissions settings but has decided that it is not a permissions based issue. I also agree because this particular system we tested it on worked without problem for months until a few months ago when this problem just started out of nowhere. 

 

We have ITS managed and unmanaged PC's here at our organisation. Managed means there are security policies pushed down to client PC's where most are still Win7 but increasingly Win10. We tested on both Managed and Unmanaged Win7 and Win10 with all browsers and it occurs on all so it potentially eliminates security policies. 

 

The Access Denied message is attached. Please remember that it's not a permissions thing - we've checked Limited Access permission groups, checked if the permissions are being incorrectly set by the workflow, (they are not). 

 

Anyone help?

 

 

2 Replies
Highlighted

Presume you have used the developer tools in your browser to see if it shows what call is failing when you get the access denied error?

Highlighted

Hello Peter,

 

Yes but that reveals little to me. Can I send them directly to you? I will black out any sensitive data.

 

C