Access Denied when attempting to create a new page

User received an error message “Access Denied” when trying to create a new page even if he / she is a member of Site Owner group with Full Control permission

Cause:

The access denied was a result of the user not being a part of the Style Resource Readers group. According to TechNet, this group allows a user to read the Master Page Gallery and Restricted Read the Style Library. By default  this group contains only the NT AUTHORITY\Authenticated Users group. This will allow all users who have authenticated to the site to read the Master Page gallery and Style Library.

Resolution:

• Open the site > Site Actions > Site Settings
• In the Users and Permissions section > People and Groups
• Click on Groups and select Style Resource Readers
• Click New > Add User
• In the Add Users section, click the Add all authenticated users link
• Click OK

A Site owner of a Sub site cannot save any list as Template gets Access Denied.

Here we have a site collection with site admins and we have some sub sites under it, every sub site is governed by different site owners (and admin’s as well but they do not step into another territory) 

When a site owner tries to save any list as template he gets Access denied 

The issue lies with the List template gallery in the Main site o look at that log on to main site > site actions > site settings > Galleries > List template gallery 

We saw that the Site collection admin was running it with unique permissions and the site owner for the sub site was given Read access out there 

We then added him as contribute on list template gallery and it fixed the issue for us

MySite Search issue with Access Denied error

Each time the crawling on MySite site collection would generate numerous errors in event log as below

Error:

System.UnauthorizedAccessException: Access denied.
   at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(Exception ex)
   at Microsoft.SharePoint.SPGlobal.HandleUnauthorizedAccessException(UnauthorizedAccessException ex)
   at Microsoft.SharePoint.Library.SPRequest.CheckOutFile(String bstrUrl, String bstrWebRelativeUrl, Boolean bCheckoutToLocal, String bstrLastModified)
   at Microsoft.SharePoint.SPFile.CheckOut(Boolean bCheckoutToLocal, String lastModifiedDate)
   at Microsoft.SharePoint.SPFile.CheckOut()
   at ABC.Intranet.Web.UI.WebControls.MySiteModifier.b__0()Additional Information:
  Site Collection URL - http://xyz.abc.com/personal/user |
  Web Site URL - http://xyz.abc.com/personal/user |
  HttpRequest URL - http://xyz.abc.com/personal/user/Personal Documents/Forms/AllItems.aspx |
  HttpContext User  - abc\Crawl_Acct |
  SPWeb User - abc\ Crawl_Acct |

The crawling account has READ permission over My Site collection and this account does have NO access to the specific URL in error below –

http://xyz.abc.com/personal/user/Personal Documents/Forms/AllItems.aspx  

Resolution:

This issue is resolved after adding Content Access Account under

 Central Administration > SSP > User Profiles and properties > Personalization services permissions
with "Manage user profiles" permission

Access Denied issue after creating new configuration database

This is one of the rare issues I was facing with my farm.

Scenario

Due to domain crash I have created a new domain with the same name and created all users which were there in old domain.

Issue

• After creating a new domain I have tried to connect with the old configuration database which failed with invalid user credentials issue.
  
• So I have created a new Configuration Database as I have Content DB of the site with me.
  
• PSConfig was completed successfully and attach content DB worked fine.
  
• Now the main issue occurred, site was accessible fine if I use farm admin credentials but it gave "Access Denied" error for all other users which I have added to the site earlier.
  

Resolution

• From my research I found it was due to Schema mismatch, so when I delete and re add that user it worked fine.
  
• Or you can use STSADM -o migrateuser command