Skip to main content Home Help (new window) Eric Shupps
Go Search
Home
Blogs
Company
Products
Services
Current News
Idera Acquires Sonar from BinaryWave
BinaryWave Announces SharePoint Performance Optimization Service
Upcoming Events
Home > Blogs > Eric Shupps > Posts > SharePoint Designer Workflows, Tasks, and the Annoying “Access Denied” Error
SharePoint Designer Workflows, Tasks, and the Annoying “Access Denied” Error

As most of you know, I try to avoid SharePoint Designer like that creepy distant relative at family reunions who always gives you the heebie-jeebies. But lately we've had some clients who insist on doing everything "out of the box", so I've had to grit my teeth and, with great trepidation, fire up ye old SPD for some simple workflow creation.

For the most part, SPD workflows are fairly innocuous, with the most pain coming from beating your head against the wall trying to make it do something simple in seventeen steps that you could do with three lines of code in Visual Studio. That being said, there are some real annoying bugs that crop up from time to time, like this one: I create and deploy a workflow as the System Account but users can't edit their own tasks in the Tasks list. They get an "Access Denied" error whenever they try to edit the task (which, being an SPD-generated task, opens a custom .aspx page instead of the standard editform.aspx page). After some intense LiveSearching, I found a post from Paul Galvin on this issue. From where I stand, this definitely looks like a bug but I can't confirm whether it's version dependent (pre-SP1, post-SP1, etc.) because all the machines I'm testing on are patched to at least the Infrastructure Update level.

Unfortunately, Paul's workaround method (saving the workflow locally) didn't work for me – the 'Save As…' options were all greyed out. After futzing with it a bit, I tried something different – I checked the workflow out, then checked it back in (right-click the workflow folder in SPD, Check-Out/Check-In). Voila! Users can now edit their own tasks. Bizarre. It's worth noting that this only happened for me on workflows that were created by the System Account – regular users with Site Owner permissions did not experience this problem (your mileage may vary).

Now, if I could only go back to doing workflows the *right* way (that is, in Visual Studio instead of SPD), my day would be made…

Comments

Great Post!

I just wanted to say thanks for posting this information.  I was having the exact same issue, and had played with the permissions but with no success.  After checking the workflow out and back in, it magically started working.  Thanks Again.
at 11/13/2008 8:41 AM

Task Workflow


Cool Stuff

All the steps are clearly mentioned.

Thanks
at 12/25/2008 1:59 AM

blah

sdkjfdjf
at 2/22/2009 10:48 AM

Thanks!

I think you just saved my mind...
at 3/31/2009 9:52 AM

Worked for me too...

after beating my head on my desk for 2 hours
at 4/14/2009 11:39 AM

Thanks!!

worked here too, after 3 h of headbanging...
at 5/19/2009 7:50 AM

Worked for me too

AAAAAAAAAAAARRRRRRRRRGGGGGGGGGGGGHHHHHHHHHHHH!!!!!!!!!!!!!!!!!

For real?  What kind of oddball random "i'd never find it in a million years' problem is this?  *sigh* such is the life of a SharePointer, eh?

Thanks a million.
at 5/21/2009 3:42 PM

THANK YOU!!!

ALE-FREAKIN'-LUIA!!! 
at 5/27/2009 7:31 AM

Access Denied only to newly added users

I have seen this and similar posts in several places.

The problem seems to be that a WF created in SPD works fine for users that were _already given access to the list the WF was attached to_.

When I add new users to the list, they get 'Access Denied' when they try to run the WF. The whole process of requesting access, and adding them to the Workflow permissions list was problematic in that

a) It didn't always work. (in fact I don't remember getting it to work)
b) In a production environment you don't want to have to continually repeat this task.

After trying many, many things I think I finally got it. If you save the WF in SPD (again, even though you make no changes) then the users that were added (Contribute) to the List since the last time you saved the WF now seem to have access to start the WF. Why I do not know, but it seems to be that some part of saving the WF in SPD must 're-associate' it with the list and it's permissions.

Okay so that's good, but each time the key users add people to this list, I need to save the WF in SPD again. Not good. To get around this, the only way I found is to ensure that you have a Group with Contribute access to such a list. Then save the WF to 're-associate' the permissions for that group. Adding users to the group after this save/re-associate sees that these new users DO have access (because the Group was given access before I saved the WF)

Convoluted, yes. Do I know why it works this way - not exactly. But if you are having issues with NEW users being able to start a WF, follow these steps and it may work:

(I'm assuming you have already created the list and the WF attached to it)

1.  Create a new group and give it Contribute access to the List in question.
2. In SPD, go the the WF in Question, open the .xoml file and click through to Finish to 're-save' it.
3. Open the other three WF files (.aspx, .xoml.rules, .xoml.wfconfig.xml) and WITHOUT CHANGING them, click 'Save'
4. Close SPD.


Now, whenever you (or your delegates) need to add users to the List, they should add them to the Group you created. This way they should automatically have access to the WFs, as the the WF was last saved AFTER the group was created.

If for any reason you provide List access to further Groups or individuals, you will need to go through Steps 2-4 above again.

Hope this helps.

Disclaimer: I have done reasonable though not exhaustive testing of this. Some of the things I state are purely from observation and what's really happening in the background may be different altogether. Would be interested if anyone can explain this or if this workaround has helped anybody else out there.
at 6/24/2009 9:07 PM

Thanks!

Guys, thanks for the solution!
at 8/12/2009 5:53 AM

Grey out task items on sharepoint

Hi, i created a form that has to be filled in by an initiator on sharepoint but some colums i want to be greyed so that only me can change them. How do i do that?
at 11/4/2009 8:16 AM

Worked!

This problem has been a thorn in our side for well over a month. We found many articles pointing to simply checking out the workflow in SPD and back in. That never worked for us. Savings all of the xml and aspx pages associated with the workflow did the trick though.

Thanks!
at 1/21/2010 12:05 PM

ict-cert

you save us, thanks a 1000000:*
at 3/13/2010 9:19 AM

Add Comment

Items on this list require content approval. Your submission will not appear in public views until approved by someone with proper rights. More information on content approval.

Title


Body *


Your Name


Your URL


Comment Date *

To prevent spam from automated bots please provide a valid date in the format "MM/DD/YYYY".
Attachments