TF50309: You do not have sufficient permissions to perform this operation.

Question

Hi, we have written some customization code which generates workitems by using subscription service, it works fine in the development environment and one of our production server. Yesterday we tried installing it on a fresh server and it gives following error i.e. when our custom code tries to connect to TeamFoundation service (the only difference is that the fresh server running windows 2003 RC2)

Detailed Message: System.Web.Services.Protocols.SoapException: Server was unable to process request . ---> System.Security.SecurityException: TF50309: You do not have sufficient permissions to perform this operation.
at Microsoft.TeamFoundation.Proxy.BisRegistrationProxy.GetRegistrationEntries(String toolId)

Any idea?

Regards
Faraz

Answer 1

Whichever account this is running as doesn't have permission to TFS.  You need to grant TFS permissions for whatever account this is running as.

Answer 2

Account is local admin with TFS administrator rights.

Faraz

Answer 3

If you login to Windows as that account (whatever it is), can you invoke the GetRegistrationEntries web method?  It's available at http://server:8080/services/v1.0/registration.asmx

Answer 4

yeah, i already tried that and its all fine..

Regards
Faraz

Answer 5

So, it sounds like your account's permissions are fine - can you check the app pool that your code is running under (in IIS) to see what identity it's running as?  If that identity should also have TF perms fine, try logging in as that user and connecting, or doing a "runas /user:that\user cmd" and trying "tf dir $/ /s:http://server:8080" to make sure that user can do the calls fine.

We're hoping to improve the error messages in these cases in the future so you can get more details about exactly which identity needs more permissions since "You" doesn't really help much :)

Answer 6

James,

Many thanks for troubleshooting with me but as i told you it might be some policies issue on that specific PC, we did the installation again on a separate PC and it worked without any problem.
Anyway Thanks for the effort.

Regards
Faraz

Answer 7

<grant TFS permissions for whatever account this is running as> Can you be more specific? How is this done, within TFS, active directory, local computer users, ???

 

Thanks

Answer 8

Check this link for the solution:
http://andrespompiglio.wordpress.com/2009/10/07/tf50309/