question

MYA-6561 avatar image
0 Votes"
MYA-6561 asked EchoDu-MSFT commented

User with full control on a Sp19 site gets access denied

A user with full access control on a SharePoint 2019 site is getting access denied. If the user is trying to create a new item or edit an existing one, he will b redirected to the access denied page. any idea about this bug?

office-sharepoint-server-administration
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @MYA-6561 ,

I'm glad to hear that your problem has been solved.

If the answer is helpful to you, you can accept it as answer. The behavior will help others who meet the similar issue in the future quickly find the correct answer.

Have a nice day!


0 Votes 0 ·

Hi @MYA-6561 ,

Would you tell me whether your issue has been resolved or have any update?
I am looking forward to your reply.

Have a nice day!

0 Votes 0 ·

1 Answer

EchoDu-MSFT avatar image
0 Votes"
EchoDu-MSFT answered EchoDu-MSFT commented

Hello @MYA-6561 ,

Please perform troubleshooting:

1.Sign in site as an admin and check this user permissions in site-level

77558-1.png

2.Sign in the list page as an admin and check this user permissions in list-level

77540-2.png

Thanks,
Echo Du

===================== Updated Answer ====================

Hi @MYA-6561 ,

Make the following troubleshooting

1. Add this site to "Trusted sites"

  • Open IE browser >> Internet options

  • On the "Internet Options" windows >> Security >> Trusted sites >> Sites

  • On the "Trusted sites" panel, add the site URL and uncheck the "Require server verification Mode" checkbox

77744-1.png

  • Click Close, and then click "Custom Level".

  • On the "Security Settings - Trusted Sites Zone" panel, scroll to the vety bottom and select "Automatic logon with current user name and password" option

  • Click Ok and Apply.

77755-3.png

2. Disable LoopBackCheck with PowerShell

 New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name “DisableLoopbackCheck” -value “1” -PropertyType dword

77754-4.png


3. Delete this user permission and re-grant user “Full Control” permission

Thanks,
Echo Du
========================
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.





1.png (47.4 KiB)
3.png (58.3 KiB)
4.png (29.8 KiB)
1.png (44.2 KiB)
2.png (45.1 KiB)
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @EchoDu-MSFT,
checking user permissions on site level and lists level is "full control"
I am not finding any reason why this user and other users are getting access denied on lists new/edit item page with full control!
the user also has access to list settings and he can access it without facing any access denied permissions. Furthermore, if I change to the modern experience the user can edit or create a new item but the username/password popup is always appearing before saving the item!

0 Votes 0 ·

Hi @MYA-6561 ,

Thanks for your reply.

I have updated answer under initial My Answer. Hope this can help you to solve issue.

Have a nice day!

Thanks,
Echo Du

0 Votes 0 ·

Hi @EchoDu-MSFT
the issue was with the hidden taxonomy list permissions.
thank you for the support

0 Votes 0 ·
Show more comments