none
Lost permissions after upgrading a site collection to SharePoint 2013 RRS feed

  • Question

  • Hi,

    I'm running into a strange situation where a user who had contribute permissions on a site when it was on a SharePoint 2010 farm no longer had access to the site once it was upgraded to SharePoint 2013.  We just did a standard detach/re-attach and ran the Mount-SPContentDatabase command to upgrade the content database to SharePoint 2013.   

    The user still appears on the <a href="http:///_layouts/user.aspx">http://<webapp>/_layouts/user.aspx page, but they get an error when they try to visit the upgraded site on the SharePoint 2013 farm.  I've tried modifying their permissions, for example changing their permission level from contribute to full control, but they still get an error.  Its only when I add them to the site collection administrators group that they can access the site again, but I don't want to grant them that level of access.

    Has anyone seen this behavior on an upgrade and/or know of a solution?  Thanks. 

     

    Wednesday, April 10, 2013 1:09 AM

Answers

  • To close the loop on this one (and hopefully this will help someone else), it turns out that the old SharePoint 2010 web application I was upgrading was actually using Windows classic mode authentication.  I found a PowerShell script on the web that I was able to use to determine whether or not the web application was using Claims-based authentication:

    $web = Get-SPWebApplication "<URL for Application>"
    $web.UseClaimsAuthentication

    After I ran through the steps to migrate from classic-mode to claims-based authentication: http://technet.microsoft.com/en-us/library/gg251985.aspx, things worked as expected and users are now able to access the migrated site collection.

    • Marked as answer by norchi Wednesday, April 17, 2013 6:11 PM
    Tuesday, April 16, 2013 8:46 PM

All replies

  • Is your new web application claims?  Was your old classic?  You'll need to migrate users to claims format.  You can test this by selecting them from people picker.

    Hope This Helps!

    Wednesday, April 10, 2013 2:18 AM
  • Thanks for the reply.

    We're using claims based authentication on both the SharePoint 2010 and SharePoint 2013 web applications.

    The user shows up in the People Picker in the Site permissions settings and I can add them (ex. granting them Contribute or Full Control permissions explicitly), but they still can't access the site.  Its only when I add them as a site collection administrator that they can get to the site.

    Another interesting thing is that they don't get the standard 'Sorry, you don't have access to this page' error that would be expected, but instead they are getting a 'Sorry, something went wrong.  An unexpected error has occurred' error.  Is this something that would show up in the ULS log or server application logs?

     

    Wednesday, April 10, 2013 10:01 PM
  • when it says "sorry something went wrong" it will show the correlation id. Based on that you can analyse the ULS logs to find more information about the error using powershell or ULS viewer.

    http://www.sharepoint-journey.com/powershell.html 


    MCTS,MCPD Sharepoint 2010. My Blog- http://www.sharepoint-journey.com
    If a post answers your question, please click "Mark As Answer" on that post and "Vote as Helpful

    Thursday, April 11, 2013 12:15 AM
  • To close the loop on this one (and hopefully this will help someone else), it turns out that the old SharePoint 2010 web application I was upgrading was actually using Windows classic mode authentication.  I found a PowerShell script on the web that I was able to use to determine whether or not the web application was using Claims-based authentication:

    $web = Get-SPWebApplication "<URL for Application>"
    $web.UseClaimsAuthentication

    After I ran through the steps to migrate from classic-mode to claims-based authentication: http://technet.microsoft.com/en-us/library/gg251985.aspx, things worked as expected and users are now able to access the migrated site collection.

    • Marked as answer by norchi Wednesday, April 17, 2013 6:11 PM
    Tuesday, April 16, 2013 8:46 PM