Project workspace issue

[Huckey]

Hi all,
I have a problem with authorizations in my project workspaces. I
want to achieve something like described in this Technet
document:http://technet.microsoft.com/en-us/library/cc197668.aspx.
It says among others:
"There might be a circumstance where you want to grant people who are
not members of the project access to the project workspace site.
Anyone assigned to the Web Administrator group can create new users
for a project workspace site. In addition to the four groups mentioned
above, there are four default Windows SharePoint Services groups. They
are:
* Full Control Has full control.
* Design Can edit lists, document libraries, and pages in
the Web site.
* Contribute Can view pages and edit list items and
documents.
* Read Can view pages, list items, and documents.
"

So I want to have some people who are not users of PWA but users of
Project Workspaces. I was able to get such users to be able to see the
contents of the project workspace and even edit documents there. They
are however not able to view/edit document properties and what is even
more problematic for me they are not able to view/edit issues (they
can see the list of issues but not issue details). In both cases they
get an "Unexpected error" page and the logs on the server show a 401
error even if these users have Full Control permissions to the
workspace.

Do you know what I should do in order to have users who are not
users of PWA to be able to use the project workspace AND be able to
edit issues there?

Thanks!

Best regards

Huckey

 

[Gary Chefetz]

I think what's happening here is that the custom web part actually interacts
with the Project Server database for a number of purposes. In order to
overcome this, users would need Project Server accounts.

 

[Huckey]

I think what's happening here is that the custom web part actually interacts
with the Project Server database for a number of purposes. In order to
overcome this, users would need Project Server accounts.

Hi, thanks for the answer. Is that what you write a known fact or your
guess? Is there a document describing the behavior of these webparts
available somewhere?

I mean, if you go do see the details of an issue there are no items
there which are fetched from Project Server. The only exception could
be if an issue is linked to a project task but that is not the case
right now for my users.

Can there be another explanation of what is happening there?

Another question: until now I have used logs on the server to check
what is happening, the logs say though only that there is a 401 error.
Is it possible to check in SQL Server level what particular object/
table is queried when this error occurs?

Thanks!

Best regards

Huckey

 

[Gary Chefetz]

Have you looked at the ULS logs? You may need to set these to a higher
verbosity, but I think an error like this will show up there.

 

[Huckey]

Have you looked at the ULS logs? You may need to set these to a higher
verbosity, but I think an error like this will show up there.

--

Hi,
here is what I get in the logs:
08/21/2009 10:35:05.49 w3wp.exe (0x16A8)
0x17DC Project Server Project Server - General
7376 Information PSI Auth: Request auth headers not set.
08/21/2009 10:35:05.60 w3wp.exe (0x0A74)
0x0998 Project Server Project Server - General
8mqg Exception System.Net.WebException: The request failed with HTTP
status 401: Unauthorized. at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse
(SoapClientMessage message, WebResponse response, Stream
responseStream, Boolean asyncCall) at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters) at
Microsoft.Office.Project.Server.WebServiceProxy.PSIProxyBase.InvokePSI
(String serviceName, String methodName, Object[] parameters)


On top of that in the Application part of Event Viewer on the server
has such entries:
Error loading and running event receiver
Microsoft.Office.Project.PWA.WSSEventReceivers.PSDBUpdater in
Microsoft.Office.Project.Server.PWA,Version=12.0.0.0,Culture=neutral,PublicKeyToken=71e9bce111e9429c.
Additional information is below.

: The request failed with HTTP status 401: Unauthorized.

I guess that the first part of the mesage saying "Request auth
headers not set" can be some hint here but I do not know what
authorization headers are meant here and how to change that.

Any ideas what this can mean?

Thanks!

Best regards

Huckey

 

[Gary Chefetz]

Huckey:

As I suspected, the web part is making a call to the PSI to retrieve data
and is failing because a user without a PWA does not have access to the
Project Server data.

Have you looked at the ULS logs? You may need to set these to a higher
verbosity, but I think an error like this will show up there.

--

Hi,
here is what I get in the logs:
08/21/2009 10:35:05.49 w3wp.exe (0x16A8)
0x17DC Project Server Project Server - General
7376 Information PSI Auth: Request auth headers not set.
08/21/2009 10:35:05.60 w3wp.exe (0x0A74)
0x0998 Project Server Project Server - General
8mqg Exception System.Net.WebException: The request failed with HTTP
status 401: Unauthorized. at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse
(SoapClientMessage message, WebResponse response, Stream
responseStream, Boolean asyncCall) at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters) at
Microsoft.Office.Project.Server.WebServiceProxy.PSIProxyBase.InvokePSI
(String serviceName, String methodName, Object[] parameters)


On top of that in the Application part of Event Viewer on the server
has such entries:
Error loading and running event receiver
Microsoft.Office.Project.PWA.WSSEventReceivers.PSDBUpdater in
Microsoft.Office.Project.Server.PWA,Version=12.0.0.0,Culture=neutral,PublicKeyToken=71e9bce111e9429c.
Additional information is below.

: The request failed with HTTP status 401: Unauthorized.

I guess that the first part of the mesage saying "Request auth
headers not set" can be some hint here but I do not know what
authorization headers are meant here and how to change that.

Any ideas what this can mean?

Thanks!

Best regards

Huckey

 

[Huckey]

Huckey:

As I suspected, the web part is making a call to the PSI to retrieve data
and is failing because a user without a PWA does not have access to the
Project Server data.

Hi Gary,
thanks for your answer. Is there any possibility to change the
behavior of this web part? I mean I can not find a reason for an issue
having the need to fetch some data from the Project Server; I also
need the non-PWA users to be able to edit issues in WSS. Can I somehow
work around this problem?

Best regards

Huckey

 

[Gary Chefetz]

How important is the integration with Project Web Access? You can always
create your own lists and deal with the data independently by sacrificing
the integration. Otherwise the custom areas of the web part cannot be
modified. Access to Issues, deliverables and risks are controlled by the
Project Server security model, so you need to introduce Project Server user
accounts to use these built-in capabilities.

 

[Huckey]

How important is the integration with Project Web Access? You can always
create your own lists and deal with the data independently by sacrificing
the integration. Otherwise the custom areas of the web part cannot be
modified. Access to Issues, deliverables and risks are controlled by the
Project Server security model, so you need to introduce Project Server user
accounts to use these built-in capabilities.

Hi,
thanks for the answer.

It looks I have no other option but to introduce Project Server user
accounts as issues and risks are central to this project. One could
just wish that MS is a bit more detailed when describing the
authorizations model - my business case for the whole implementation
of Project Server is not that nice anymore :-(

Best regards

Huckey

 

[A Eberhard]

Hi Huckey,

Did you ever make any further progress on this? I'm running into the exact same problem. Resources external to the project still want to see issues and risks but cannot because of the "unknown error" error. The errors in the application log are exactly what you reported.

Many thanks,
A




Huckey wrote:

Re: Project workspace issue
26-Aug-09

Hi
thanks for the answer

It looks I have no other option but to introduce Project Server use
accounts as issues and risks are central to this project. One coul
just wish that MS is a bit more detailed when describing th
authorizations model - my business case for the whole implementatio
of Project Server is not that nice anymore :-

Best regard

Huckey

EggHeadCafe - Software Developer Portal of Choice
WPF And The Model View View Model Pattern
http://www.eggheadcafe.com/tutorial...b-7374d3da3425/wpf-and-the-model-view-vi.aspx