Thursday, 11 February 2010

Access denied deleting a post from a list

I had users reporting problems using "Delete item" from the drop-down menu on a post in the /Lists/Posts/allposts.aspx view of a list in MOSS.  If you browsed to the post directly and chose Delete Page from the Page menu on the page editing toolbar it would delete fine.  So what's going on here?

It appears that when you delete via the allposts.aspx page it calls _vti_bin/OWSSVR.dll and passes it some querystring parameters to let it know what to do.

To cut a long and boring story short it appears that to call this you need to have the "Use Remote Interfaces" permission in whatever permission level your user account is using on the site.

If you decide to create custom permission levels and remove everything that you don't recognise(or think you need) then you might end up in the same situation that I did!

Here's a handy link to a list of the SharePoint base permissions and what they mean.  Make sure you scroll down the page to find the list of Hex values relating to each permission, this will be useful if you ever need to enable verbose diagnostic logging in the Central Admin.

I hope this saves someone else a bit of time.

No comments:

Post a Comment