PWA Access denied for a Project Manager

[Sebastian Cordoba]

[PS 2007] Hello everyone.

I'm having this issue and it's really driving me crazy: I gave "Project
Manager" permissions to a specific user. He's able to connect to Project
Server via Project Professional but when he tries to access the PWA instance
appears an "Access Denied" message. Why is that?

I've tried several options:
- Gave him "Administrator" permissions.
- Deleted and created the user.
- Inactivated the user

All I know is that a couple a months ago he was deleted (by mistake) from
the active directory, but created again.

He has no problems to access the Intranet sites of our company (including
the ones that need authentication)

Thank for your help.

 

[Robert]

Might be as simple as the user is trying to hit the wrong url.
Ask the user for the url he or she is using to access the PWA Home Page.
Make sure it matches what they are suppose to be using.



--
Project Consultant

REJ Company

(e-mail address removed)

 

[Jonathan Sofer [MVP]]

1) Verify that this user shows up in PWA>Site Actions>Site Settings>Advanced
Permissions
2) Verify that there are no "Deny" set at the user level. For that matter
verify there are no permissions at all set at the user level.
3) Make sure the user belongs to a group that has "Log on" global permission
4) Make sure there are no errors in the queue for user synchronization jobs.

Jonathan

 

[Sebastian Cordoba]

Thank you guys for your response.

ROBERT:
URL is right. In fact I'm trying to connect from my PC using his login and
password (error appears) but If I use mine there's no problem.

JONATHAN:
1) User does show up in PWA>Site Actions>Site Settings>Advanced
Permissions.
2) I've verified all of his permissions and none of them is set (neither
"Allow" nor "Deny")
3) User belongs to "Project Managers" and "Team Members" groups. Both have
the "Log On" permission allowed. In fact, he's the ONLY person with this
problem.
4) I've checked the queue's last month history and all of the Sync jobs
succeeded.

What else could it be? Do I have to check something in Active Directory?

Thanks in advance.

 

[Robert]

Sounds like his PW or username are incorrrect.
That is odd though he can log into PWA through MPP and not in IE.
Has his creditials changed recently?

--
Project Consultant

REJ Company

(e-mail address removed)

 

[Sebastian Cordoba]

Hi Robert.

User is not able to access PWA via Project. I meant that he can connect to
the specific account in Project Server when he starts a Project Professional
session, which means that his permissions as Project Manager and the
authentication are fine.

My question is: If he's able to work with Project Professional being
connected (he's able to save files, even publish them), why is his access
denied to the PWA instance when he tries to get there via Internet Explorer
and Project?

Thanks for your help.

 

[Robert]

Seems that his account is unchecked somewhere in the security settings.
Look at the groups he is attached to and then verify his settings are
correctly done as it sounds like one of these is over riding the other.
Meaning you have a deny or null somewhere...

--
Project Consultant

REJ Company

(e-mail address removed)

 

[Sebastian Cordoba]

Hi Robert.

There ain't no issues with the security settings. This user has the same
permissions and belongs to the same groups as the rest of PMs. In fact I've
added him as a TOTALLY NEW resource in another instance and same thing
happens: he's able to start a Project Professional session (selecting the
specific account), save and publish projects, but he can't access PWA from
Project or IE --> Message: "Access Denied".

Seriously, I don't know what to do. This is just disconcerting.

Thanks for your attention.

 

[Sebastian Cordoba]

Guys, problem solved!!!

It had do to with the permissions at sharepoint level (Jonathan had said
something related to this). I followed this steps:

1- Log in to the PWA instance with the Administrator Account
2- Site Actions --> Site Settings --> People and Groups
3- Delete the user and Add him again

More info:
http://www.eggheadcafe.com/conversation.aspx?messageid=33047166&threadid=33017083

 

[Jonathan Sofer [MVP]]

Thanks for sharing your solution.

I'm glad you found a fix. It is interesting that the user belonged to a
security group in the top site in WSS but still could not log in.

You also said you added this user to a new instance and had the same issue.
Was this new instance a copy of your other environment? If not, I'm curious
why the same issue on the other instance.

Jonathan

 

[Sebastian Cordoba]

Hi Jonathan.

To be honest with you, I'm not quite sure if the other instances are a copy
of the other environment. What's true is that this issue is very rare because
apparently everything was fine, every permission level for this user was ok.

Finally I found this solution and you can't imagine how glad I am. Thanks
for your interest and support.

Good bye.