none
TF50309: You do not have sufficient permissions to perform this operation.

    Question

  • Hi, we have written some customization code which generates workitems by using subscription service, it works fine in the development environment and one of our production server. Yesterday we tried installing it on a fresh server and it gives following error i.e. when our custom code tries to connect to TeamFoundation service (the only difference is that the fresh server running windows 2003 RC2)

    Detailed Message: System.Web.Services.Protocols.SoapException: Server was unable to process request . ---> System.Security.SecurityException: TF50309: You do not have sufficient permissions to perform this operation.
    at Microsoft.TeamFoundation.Proxy.BisRegistrationProxy.GetRegistrationEntries(String toolId)

    Any idea?

    Regards
    Faraz

    Monday, February 26, 2007 5:38 PM

Answers

  • So, it sounds like your account's permissions are fine - can you check the app pool that your code is running under (in IIS) to see what identity it's running as?  If that identity should also have TF perms fine, try logging in as that user and connecting, or doing a "runas /user:that\user cmd" and trying "tf dir $/ /s:http://server:8080" to make sure that user can do the calls fine.

    We're hoping to improve the error messages in these cases in the future so you can get more details about exactly which identity needs more permissions since "You" doesn't really help much :)
    Sunday, March 04, 2007 4:26 AM

All replies

  • Whichever account this is running as doesn't have permission to TFS.  You need to grant TFS permissions for whatever account this is running as.
    Monday, February 26, 2007 6:15 PM
  • Account is local admin with TFS administrator rights.

    Faraz

    Monday, February 26, 2007 10:54 PM
  • If you login to Windows as that account (whatever it is), can you invoke the GetRegistrationEntries web method?  It's available at http://server:8080/services/v1.0/registration.asmx
    Thursday, March 01, 2007 5:18 AM
  • yeah, i already tried that and its all fine..

    Regards
    Faraz
    Thursday, March 01, 2007 4:54 PM
  • So, it sounds like your account's permissions are fine - can you check the app pool that your code is running under (in IIS) to see what identity it's running as?  If that identity should also have TF perms fine, try logging in as that user and connecting, or doing a "runas /user:that\user cmd" and trying "tf dir $/ /s:http://server:8080" to make sure that user can do the calls fine.

    We're hoping to improve the error messages in these cases in the future so you can get more details about exactly which identity needs more permissions since "You" doesn't really help much :)
    Sunday, March 04, 2007 4:26 AM
  • James,

    Many thanks for troubleshooting with me but as i told you it might be some policies issue on that specific PC, we did the installation again on a separate PC and it worked without any problem.
    Anyway Thanks for the effort.

    Regards
    Faraz
    Tuesday, March 06, 2007 11:41 AM
  • <grant TFS permissions for whatever account this is running as> Can you be more specific? How is this done, within TFS, active directory, local computer users, ???

     

    Thanks

    Saturday, December 22, 2007 6:33 PM
  • Thursday, November 19, 2009 3:38 PM