“拒绝访问”当开箱即用的审批工作流程开始时 - 用户具有完全控制权 [英] "Access Denied" given when out-of-box Approval workflow starts - user has Full Control

问题描述

大家好，

我很感激以下问题的任何提示：

我们有文档库，我们在其中配置版本控制如下：

- 需要内容提交 - 是;  

- 创建主要和次要版本;  

- 谁应该看到草稿项目 - 只有用户才能编辑项目;  

- 需要结账 - 否。

我们已使用"Approval - SharePoint 2010"模板向库中添加了现成工作流程。它的配置如下： 

- 任务和历史记录列表是标准的，它们从网站继承权限; 

- '允许手动启动此工作流'已选中;

- "启动此工作流程以批准发布主要项目"已选中;

- 审批者：一位用户已列出完全控制权;

- 选中最后一个复选框"启用内容审批 - 工作流程完成后更新状态"。

问题： 

当任何用户（包括对网站，库和任务/历史记录列表具有完全控制权的用户）尝试
发布文档时，提供了拒绝访问错误。

我已经彻底检查了权限，并且我已经向用户提供了我正在使用完全控制进行测试，即使它们也是SCA。我还给了系统帐户完全控制，以防由于涉及工作流程而需要，并且问题仍然是
。

问题出现在生产环境中的所有子网站/库中，以及测试环境中的所有子网站/库，其设置与生产相同。

当我使用"基本网站"网站和新库创建新网络应用程序时，无可否认问题是
不会发生，因此这不是SharePoint或SharePoint版本的问题。

我已经检查了ULS日志，除了Access Denied消息之外几乎没有其他消息，表明它正在按预期工作。但我不明白为什么它会拒绝访问Access，或者拒绝访问Access。

有谁可以建议这里可能出现的问题类型？或者甚至我如何确定哪些访问被拒绝？我尝试运行SQL跟踪，但它没有引导我找到问题的原因。

如果有帮助，我会在下面的ULS日志中添加一行。谢谢。

03/23/2012 12：30：18.90    ;     w3wp.exe（0x13E0）                               
0x0664    SharePoint Foundation          
工作流程基础架构         72er               介质                 
System.UnauthorizedAccessException：访问被拒绝。 （来自HRESULT的异常：0x80070005（E_ACCESSDENIED））     at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied（Exception ex）    在Microsoft.SharePoint.Library.SPRequest.OpenWeb（String
bstrUrl，String& pbstrServerRelativeUrl，String& pbstrTitle，String& pbstrDescription，String& pbstrTitleResourceId，String& pbstrDescriptionResourceId，Guid& pguidID，String& pbstrRequestAccessEmail，UInt32& pwebVersion， Guid&
pguidScopeId，UInt32& pnAuthorID，UInt32& pnLanguage，UInt32& pnLocale，UInt16& pnTimeZone，Boolean& bTime24，Int16& pnCollat​​ion，UInt32& pnCollat​​ionLCID，Int16& pnCalendarType，Int16& pnAdjustHijriDays，Int16& pnAltCalendarType，
布尔& pbShowWeeks，Int16& pnFirstWeekOfYear，UInt32& pnFirstDayOfWeek，Int16& pnWorkDays，...   ad539737-73bc-48ad-828b-10cf38768317

解决方案

要添加的其他两点：

1）发生错误时，工作流历史中记录以下内容：

"工作流程无法更新项目，可能是因为该项目的一个或多个列需要不同类型的信息。"

我已用Google搜索但是没有'找到解决方案。

2）如果我更改了工作流程的选项，那么：

- '开始这个不检查批准发布主要项目的工作流程;

- 相反，"创建新项目时启动此工作流程"已选中;

- 未启用"启用内容审批 - 工作流程完成后更新状态"

然后，对于新项目，工作流程启动正常，并创建任务。只需提及此项以显示启动工作流和创建任务等的权限就可以了。感谢

Hi all,

I'd appreciate any tips on the following issue:

We have a Document Library where we have configured Versioning as follows:

- Require Content Aproval - Yes;  

- Create major and minor versions;  

- Who should see draft items - Only users can edit items;  

- Require checkout - No.

We have added an out-of-box workflow using the 'Approval - SharePoint 2010' template to the library. It's configured as follows: 

- Tasks and History lists are standard, they inherit permissions from the site; 

- 'Allow this workflow to be manually started' is checked;

- 'Start this workflow to approve publishing a major item' is checked;

- Approvers: one user who has Full Control is listed;

- The last checkbox 'Enable Content Approval - update status when workflow is completed' is checked.

The Problem: 

when any user, including those who have Full Control on the site, library, and Tasks/History lists, tries to Publish a document, an Access Denied error is given.

I've checked the permissions thoroughly and I've given the user I'm testing with Full Control everywhere, even though they are also an SCA. I also gave the System account Full Control, in case this was needed due to workflows being involved, and the issue remains.

The issue occurs on all subsites/libraries in the Production environment, and also everywhere on the Test environment, which has the same setup as Production.

When I create a new web application with a 'Basic Site' site and new library, admittedly the issue does not occur, so this is not an issue with SharePoint or the version of SharePoint.

I've checked the ULS logs, and there is very little there other than the Access Denied message, suggesting it is working as it should. But I can't see why it is giving Access Denied, or what Access is being Denied.

Can anyone suggest what type of problem might be occurring here? Or even how I can determine what access is being denied? I tried running a SQL trace but it didn't lead me to the cause of the issue.

I'll add one line from the ULS logs below in case it helps. Thank you.

03/23/2012 12:30:18.90         w3wp.exe (0x13E0)                                0x0664    SharePoint Foundation           Workflow Infrastructure         72er                Medium                  System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))     at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(Exception ex)     at Microsoft.SharePoint.Library.SPRequest.OpenWeb(String bstrUrl, String& pbstrServerRelativeUrl, String& pbstrTitle, String& pbstrDescription, String& pbstrTitleResourceId, String& pbstrDescriptionResourceId, Guid& pguidID, String& pbstrRequestAccessEmail, UInt32& pwebVersion, Guid& pguidScopeId, UInt32& pnAuthorID, UInt32& pnLanguage, UInt32& pnLocale, UInt16& pnTimeZone, Boolean& bTime24, Int16& pnCollation, UInt32& pnCollationLCID, Int16& pnCalendarType, Int16& pnAdjustHijriDays, Int16& pnAltCalendarType, Boolean& pbShowWeeks, Int16& pnFirstWeekOfYear, UInt32& pnFirstDayOfWeek, Int16& pnWorkDays,...   ad539737-73bc-48ad-828b-10cf38768317

解决方案

Two other points to add:

1) When error occurs, the following is logged in Workflow History:

"The workflow could not update the item, possibly because one or more columns for the item require a different type of information."

I've Googled this but didn't find a solution.

2) If I change the options for the workflow so that:

- 'Start this workflow to approve publishing for a major item' is NOT checked;

- Instead, 'Start this workflow when a new item is created' IS checked;

- The 'Enable Content Approval - update status when workflow is completed' is NOT checked

Then for new items, the workflow starts fine, and the task is created. Just mentioning this to show the permissions to start workflows and create tasks etc are fine. thanks

这篇关于“拒绝访问”当开箱即用的审批工作流程开始时 - 用户具有完全控制权的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！