Re: credentials prompt accessing list anonymously

Hey Mike,

Anonymous users, for those Lists, have been given the additional Add Items
permission (in addition to the default Read permissions). The only
permissions they are missing is Edit and Delete.

"Mike Walsh" wrote:

Even if you have given then Add functionality, they will still need to
sign in to get it.

All they they have by default in a site accessible by anonymous access
is Reader permissions.

So unless you have amended anonymous access so that anonymous people
have Contributor rights (the other option to the default Reader), these
people you have given add rights will still need to specify their name
and password before being allowed to add anything.

Mike Walsh


Robbie wrote:
As soon as they want to create an Announcement they are doing more than
Read so they need credentials.
I have already given them add functionality to the two Lists. They do not
have Edit or Delete Items ability. Should they need either?

So in my opinion the credential prompt is still "surprising."

I use ExpertsExchange.com to look up answers to some things. Someone else
has this issue, and here is the question and basically, after a long
discussion, their response:
Q: I have discovered a bug with anonymous access on Portal server 2003.
When Anonymous access is enabled, you can't log in to the sections that
require it. I called Microsoft Support and was told this is by design.
(Terrible design in my opinion, but by design none the less) Apparently when
a restricted area is accessed, Sharepoint first looks at IIS to see if
Anonymous access is allowed and if it is, denies the request no matter who is
actually logged in. Does anyone know any way around this?
Comment: It is so that there are no "back-door" entries into other
portals/sites.
Answer: This is a known issue with Sharepoint and the only real workarounds
are the ones discussed above.

Hopefully Microsoft will address this is a fix or service pack for Sharepoint.

Dave Dietz
Administrative comment: As Dave notes, the answer is that there is no real
solution, only workarounds.
Note: The workaround - can make it work like I want for a short time by
disableing Anonymous access, restarting IIS and then enableing anonymous
access without restarting IIS, but once the process restarts on its own, I'm
back to square one.

I hope this is helpful. This isn't documented very well out there.

"Mike Walsh" wrote:

It's set up to be anonymous access so people can access it with
(default) Reader functionality without needing to give credentials.

As soon as they want to create an Announcement they are doing more than
Read so they need credentials.

So the real questions is why you are not being asked for credentials
when accessing internally. The answer is almost certainly that IE is set
up for the Intranet security zone to use current name and password.

In other words I see nothing to suggest that asking for a credential
prompt for your external users is "surprising".

Mike Walsh
WSS FAQ http://www.wssfaq.com
no questions by e-mail please



Robbie wrote:
WSS 3.0, 2K3server
I am having issues with a site that's set up to have anonymous access.
Everyone can access the site great (the whole application is set to
anonymous), all of the pages are great. But when someone outside of the
office wants to add an annoucement to a List, for example, they get a
surprising credential prompt. It's the oddest, and most frustrating, thing.

Any thoughts?

As a note, when I am internal, I do not get a prompt. I have anonymous
access enabled in IIS but also Windows Authentication. I have tried adding
and taking off Digest and Basic, but the user still has the same issue.

.

Relevant Pages

  • Re: Logon Failures
    ... In order to get permissions at List level you need to move to the newer (and ... > I created a test site without STS, set it to no anonymous access and was ... > able to login with the users who cannot log into the STS site. ... >>> If anonymous access is not allowed and Integrated Windows ...
    (microsoft.public.sharepoint.teamservices)
  • Re: Intermittent LDAP Table not found error
    ... In the security settings for the page under IISMGR I had set the credentials ... called from a page that runs under the user's security (anonymous access ... refresh or Ctrl-refresh don't help but if you HOLD DOWN F5 ...
    (microsoft.public.windows.server.scripting)
  • Re: credentials prompt accessing list anonymously
    ... So in my opinion the credential prompt is still "surprising." ... I have discovered a bug with anonymous access on Portal server 2003. ... access without restarting IIS, but once the process restarts on its own, I'm ... Reader functionality without needing to give credentials. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: credentials prompt accessing list anonymously
    ... Even if you have given then Add functionality, they will still need to sign in to get it. ... So unless you have amended anonymous access so that anonymous people have Contributor rights, these people you have given add rights will still need to specify their name and password before being allowed to add anything. ... The workaround - can make it work like I want for a short time by disableing Anonymous access, restarting IIS and then enableing anonymous access without restarting IIS, but once the process restarts on its own, I'm back to square one. ... Reader functionality without needing to give credentials. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Windows XP (IIS 5) and ASP.NET 2.0 Application?
    ... browse to the Virtual Directories under my IIS installation (that were setup ... even when supplying the correct credentials). ... Anonymous Access) and now I keep getting prompted for credentials every ... However, when I run Internet Explorer as "Administrator", I see my site ...
    (microsoft.public.dotnet.framework.aspnet)