更改网站权限会导致网站集崩溃 [英] Changing Site Permissions Crashes Site Collection

问题描述

我有一个具有唯一权限的发布网站.其中的某些列表和库也具有唯一权限.当我在网站级别上编辑权限并删除不再希望对此子网站拥有权限的某个组时，它会旋转 而且似乎永远不会完成.实际上，整个网站集变得没有响应.人们无法访问根网站或网站集中的其他网站.经过30多分钟的故障排除，以了解导致该网站瘫痪的原因(我没有意识到 首先是我的权限更新)，我们做了IISRESET，似乎没有帮助.重新启动Web服务器后，该站点重新启动并正常运行.我的权限更新没有完成.

I have a publishing site with unique permissions. Certain lists and libraries within it also have unique permissions. When I edit the permissions at the site level and remove a certain group that I no longer want to have permission to this subsite, it spins and never seems to finish. In fact, the entire site collection becomes unresponsive. People cannot get to the root site or other sites in the site collection. After more than 30 minutes of troubleshooting to see what took the site down (I didn't realize at first it was my permission update) we did an IISRESET which didn't seem to help. After rebooting the web servers, the site came back up and was running normally. My permission update did not take.

为什么权限更新会导致这种情况?

Why would a permission update cause this?

我能够更新此网站上其他列表和项目的权限.只有当我在网站级别更新权限时，所有内容才会锁定.除了页面超时错误，我在与此相关的日志中没有发现任何错误.

I am able to update permissions on other lists and items within this site. It's only when I update permissions at the site level that everything locks up. I found no errors in the logs related to this other than page timeout errors.

服务器场具有2个Web前端(负载均衡)和2个应用程序服务器.该站点有一个列表，其中包含大约90,000个项目.它包含约400个文件夹，每个文件夹具有唯一权限.项目分布在这些文件夹中.另一个清单 每个拥有将近10,000个具有唯一权限的项目.我的想法之一是，大量的唯一权限引起了问题.但是，为什么在网站级别进行更改会使网站瘫痪?大列表具有唯一权限，因此需要进行更改 这些列表项不应继承网站一级的内容.

The farm has 2 web front ends (load balanced) and 2 app servers. The site in question has one list that is large with about 90,000 items. It contains about 400 folders each with unique permissions. The items are distributed among those folders. Another list has almost 10,000 items each with unique permissions. One of my thoughts is that the large number of unique permissions is causing a problem. But why would a change at the site level take the site down? The large lists have unique permissions, so a change at the site level should not be inherited by these list items.

我已经考虑过使用10,000个唯一项来重组列表，以改为使用文件夹进行许可.这些项目只有大约300-400个唯一的权限集，因此我们可以将具有共同权限的所有项目分组到一个文件夹中 并仅在文件夹级别上应用这些权限.这样会将唯一权限分配的数量从10,000减少到大约400.(嗯，我想更准确地说，每个对象可能有3个分配；因此它将减少 30,000到1,200.)我的问题仍然是，这会有所作为吗?这可能是导致网站完全瘫痪的原因吗?

I have considered restructuring the list with 10,000 unique items to instead use folders for permission. There are only about 300 - 400 unique sets of permissions on those items, so we could group all the items with common permissions into a single folder and apply those permissions only at the folder level. This would reduce the number of unique permission assignments from 10,000 to about 400. (Well, I guess more accurately, there are probably 3 assignments for each of those objects; so it would reduce from 30,000 to 1,200.) My question is still, would this make a difference? Is this a likely cause for taking the site completely down?

在这种情况下，网站崩溃还有哪些其他可能的原因?

What other possible causes are there for the site crashing in this scenario?

感谢您可以分享的任何见识.

Thanks for any insight you can share.

推荐答案

您好danWhite37，

很难确定问题的原因.
为列表设置的唯一安全范围的最大数量不能超过50,000.对于大多数服务器场，我们建议您考虑将此限制降低到5,000个唯一范围.对于大型列表，请考虑使用与唯一列表一样少的唯一权限的设计 可能.

https://docs.microsoft.com/en-us/sharepoint/install/软件边界和限制

您可以尝试使用10,000个唯一项重新构建列表，以改用文件夹进行许可并比较结果.

如果问题仍然存在，请检查ULS日志.确定错误的确切原因. ULS日志位于:      

C:\ Program Files \ Common Files \ Microsoft共享\ Web服务器扩展\ 15 \ LOGS

Hi danWhite37, 

It is hard to determine the cause of the issue. 

The maximum number of unique security scopes set for a list cannot exceed 50,000. For most farms, we recommend that you consider lowering this limit to 5,000 unique scopes. For large lists, consider using a design that uses as few unique permissions as possible. 

https://docs.microsoft.com/en-us/sharepoint/install/software-boundaries-and-limits

You can try to restructure the list with 10,000 unique items to instead use folders for permission and compare the results. 

If the issue still exists, check the ULS log  to determine the exact cause of the error. ULS log is at:       

C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\LOGS

最好的问候，

丽莎·陈(Lisa Chen)

Best Regards, 

Lisa Chen 

这篇关于更改网站权限会导致网站集崩溃的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！