Tech Space

The Technical Solution Space for SharePoint 2010, MOSS 2007, and .Net (C#, VB.Net)

Recently discovered an issue in SharePoint 2007 when creating a new Page under Pages Library, we were getting "Access Denied" error message in "CreatePage.aspx" page. The users accessing the site have "Full Control" and they are getting the "Create Page" option in the "Site Actions" menu, so this should not be a security problem. This was really shocking and finally could find a solution for the same. The User or Group needs to also have "Read" permission to the master page gallery, and then this works fine.
Resolution:

  • Go to Site Actions -> Site Settings -> Modify All Site Settings.
  • Go to Galleries -> Master pages and page layouts.
  • Within the Master pages library/list, Select Settings -> Document Library Settings.
  • Select Permissions for this document library.
  • Add "Restricted Read" access to the User or Group.

After this we should not have any issue in creating Pages in pages library.

A SharePoint Permission Levels are group of permissions that can be granted to users or SharePoint groups so that they can perform specific actions on securable objects such as a site, library, list, folder, item, or document on your site. Permission levels allow you to group permissions and apply them to users and SharePoint groups on various sites in your SharePoint.

When you create a SharePoint site, there are five permission levels provided by default:

  • Full Control: allows users or groups full control over a site. Full Control is the least restrictive permission level. You can not modify or remove this permission level.

  • Design: allows users or groups to view, add, update, delete, approve, and customize lists, libraries, and pages on your site, including themes and style sheets.

  • Contribute: allows users or groups to view, add, update, and delete previously created list items and document libraries.

  • Read: allows users or groups to read pages on the site including the resource libraries. Read is the most restrictive permission level.

  • Limited Access: is a permission level that is automatically assigned to a user or group and therefore cannot be directly assigned by the administrator. It is used when you assign the users or groups to a child object of a parent object to which they do not have access. You can not modify or remove this permission level.

Click on below image to enlarge...