Access Denied when trying to edit page

Question

all users (including farm admin) are having an issue editing existing pages on all sites on a give web app (another web app on the same server is fine.

Whenever a user goes to edit a page, they get a 403 error (https://ibin.co/2zalK70FhiPC.png). I've loked at ULS, Event Viewer, and ProcMon. 

ULS says: 

 SPRequest.OpenWeb: UserPrincipalName=, AppPrincipalName= ,bstrUrl=http://buildeagle.com/

and then 

	System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)), StackTrace:   	 at Microsoft.SharePoint.SPWeb.InitWeb()    	 at Microsoft.SharePoint.SPWeb.get_SecurableObjectImpl()    	 at Microsoft.SharePoint.SPSecurableObject.get_HasUniqueRoleAssignments()    	 at Microsoft.SharePoint.SPAccessRequestsUtility.TryGetAccessRequestListCore(SPWeb web, SPList& arl, Boolean ignoreRoleAssignments, Boolean& incompatibleListWithSameNameExists)    	 at Microsoft.SharePoint.SPAccessRequestsUtility.TryGetAccessRequestList(SPWeb web, SPList& arl, Boolean ignoreRoleAssignments)    	 at Microsoft.SharePoint.WebControls.AccessRequestsDialog.InitControls(SPWeb webAsSystem, SPList listAsSystem, SPListItem itemAsSystem, SPObjectType requestType)    	 at Microsoft.SharePoint.WebControls.AccessRequestsDialog.<>c__DisplayClass1.<OnLoad>b__0()    	 at Microsoft.SharePoint.SPSecurity.<>c__DisplayClass5.<RunWithElevatedPrivileges>b__3()    	 at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated secureCode)    	 at Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback secureCode, Object param)    	 at Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated secureCode)    	 at Microsoft.SharePoint.WebControls.AccessRequestsDialog.OnLoad(EventArgs e)    	 at System.Web.UI.Control.LoadRecursive()    	 at System.Web.UI.Control.LoadRecursive()    	 at System.Web.UI.Control.LoadRecursive()    	 at System.Web.UI.Control.LoadRecursive()    	 at System.Web.UI.Control.LoadRecursive()    	 at System.Web.UI.Control.LoadRecursive()    	 at System.Web.UI.Control.LoadRecursive()    	 at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)    	 at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)    	 at System.Web.UI.Page.ProcessRequest()    	 at System.Web.UI.Page.ProcessRequest(HttpContext context)    	 at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()    	 at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)    	 at System.Web.HttpApplication.PipelineStepManager.ResumeSteps(Exception error)    	 at System.Web.HttpApplication.BeginProcessRequestNotification(HttpContext context, AsyncCallback cb)    	 at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context)    	 at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)    	 at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)    	 at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)    	 at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)    	 at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)    	 at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)

Windows event viewer is complaining about the Managed metadata service not running, but I don't think that's related, since the other web application isn't crashing.

Thanks for the help. 

Answer 1

Hi Trevor_Eagle,

For troubleshooting the issue, you could check things below:

1.  Delete and recreate the user profile service in central administration. Then start the user profile service in manage services on servers.

2. Run a user profile sync in user profile service application.

3. And start the managed metadata service in central administration.

Best regards,

Sara Fan

---

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [e-mail]

Answer 2

Hi Sara, 

I don't have the user profile service installed. Managed metadata is running.

Answer 3

I realized I had set the Web application to run as the services user instead of the farm admin user. Once I switched that, all was well.

Answer 4

Hi Trevor_Eagle,

It is very happy that you have resolved your problem.

Thank you for your sharing and it will help others have the same issue.

If the reply is helpful to you, you could mark the reply as answer. Thanks for your understanding.

Best regards,

Sara Fan

---

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [e-mail]