Qdabra qRules

Re: Error on Submit

klink — Thu, 02 Oct 2014 19:54:24 GMT

Just a follow-up on what I think caused the problems. It seems that the site I was deploying this form to is claims-based, which is what was causing a lot of the permissions errors. Too bad the developer didn't think of that earlier. =/

Steps:

1. Error: "Error ocurred submitting data to list: Request for the permission of type 'Microsoft.SharePoint.Security.SharePointPermission, Microsoft.SharePoint.Security, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c' failed."

Changed trust level in application web.config file system.web section: <trust level=”WSS_Medium” originUrl=”” />

2. Error: "Error ocurred submitting data to list: Request failed."

Added a rule on the QdabraRules data source finishedLoading attribute to set the useWebServices attribute to true. You'll want a condition on the rule - if finishedLoading = true, set useWebServices to true.

After figuring out that I couldn't deploy the form from Central Admin (and instead had to do it from "Site Collection Features"),

3. Error: "Access denied. You do not have permission to perform this action or access this resource."

Converted SPSubmit to a UDC file.

4. Still getting error: "Access denied. You do not have permission to perform this action or access this resource."

5. Errors behind the scenes:

Failed to get SPGroupName from GroupID. Error Message: Group cannot be found. Callstack:
at Microsoft.SharePoint.SPGroupCollection.GetByID(Int32 id)
at Microsoft.SharePoint.WebControls.PeopleEditor.set_SharePointGroupID(Int32 value).

Batchmgr Method error. Errorcode: 0x2ac7aa00. Error message: Access denied. You do not have permission to perform this action or access this resource.

Noticed that we had gotten Failed to get SPGroupName from GroupID before. Was also told by developer that this a was claims-based site. Resolved by doing the following (got this from this article: Using UserProfileService.asmx and UserGroup.asmx with an Infopath form. You have to go way down to the second reply by Peter87):

<quote>

As is generally best practice, your data connection file should be exported to a Universal Data Connection File (.udcx) file and saved to a Data Connection library in SharePoint. By default when you export a udcx file you get the following at the bottom
 
This means we're not specifying any authentication and trying to use the current user's permission. However, I believe there's a double hop issue when trying to connect to UserProfileService.asmx and SharePoint is using nt authority\iusr. We need to provide a specific account to connect to the web service as. I created a secure store application ID called InfoPath and my data connection file now has this entry
	  <udc:Authentication>
		<udc:SSO AppId="InfoPath" CredentialType="NTLM" /> 
	  </udc:Authentication>
Finally, instead of calling a method on UserProfileService.asml with no parameters and getting the current user by default, you have to be explicit about what user you're querying for. Stop the data connection from connecting automatically on form load and add a form load action with two steps
Set the query parameter in the web service call to the current user using concat("domain\",username())
Query the data connection</quote>

6. SUCCESS!!

Re: Error on Submit

Hilary Stoupa — Wed, 01 Oct 2014 16:22:57 GMT

Hey, great news!

Re: Error on Submit

klink — Wed, 01 Oct 2014 16:12:40 GMT

OMG!!!!! I can't believe it! Changing the UDC file FIXED THE PROBLEM!!!!

Re: Error on Submit

klink — Wed, 01 Oct 2014 15:48:56 GMT

Is the form still working in preview / filler? Yes

Is the form still admin deployed? Yes

Do you still have useWebServices getting set to true on the qRules finishedLoading node? Yes

Interesting Note:

I uploaded two separate forms.

Submit as UDC
Submit not UDC

Results from developer:

From Submit as UDC:

Failed to get SPGroupName from GroupID. Error Message: Group cannot be found. Callstack:
at Microsoft.SharePoint.SPGroupCollection.GetByID(Int32 id)
at Microsoft.SharePoint.WebControls.PeopleEditor.set_SharePointGroupID(Int32 value).

Batchmgr Method error. Errorcode: 0x2ac7aa00. Error message: Access denied. You do not have permission to perform this action or access this resource.

From Submit without UDC:

Batchmgr Method error. Errorcode: 0x2ac7aa00. Error message: Access denied. You do not have permission to perform this action or access this resource.

Don't know if this rings any bells. I think the "Failed to get SPGroupName" we have gotten before and resolved with this:

As is generally best practice, your data connection file should be exported to a Universal Data Connection File (.udcx) file and saved to a Data Connection library in SharePoint. By default when you export a udcx file you get the following at the bottom
 
This means we're not specifying any authentication and trying to use the current user's permission. However, I believe there's a double hop issue when trying to connect to UserProfileService.asmx and SharePoint is using nt authority\iusr. We need to provide a specific account to connect to the web service as. I created a secure store application ID called InfoPath and my data connection file now has this entry
	  <udc:Authentication>
		<udc:SSO AppId="InfoPath" CredentialType="NTLM" /> 
	  </udc:Authentication>
Finally, instead of calling a method on UserProfileService.asml with no parameters and getting the current user by default, you have to be explicit about what user you're querying for. Stop the data connection from connecting automatically on form load and add a form load action with two steps

Set the query parameter in the web service call to the current user using concat("domain\",username())

Query the data connection

Re: Error on Submit

Hilary Stoupa — Wed, 01 Oct 2014 14:54:05 GMT

Converting the working, retrieve data connections to UDCX shouldn't impact this.

Is the form still working in preview / filler?

Is the form still admin deployed?

Do you still have useWebServices getting set to true on the qRules finishedLoading node?

Re: Error on Submit

klink — Wed, 01 Oct 2014 14:02:05 GMT

klink:
Okay, back on track. Started over. Form comes up with data, but on SubmitToSharePointList getting this:
Access denied. You do not have permission to perform this action or access this resource.
Since I'm a site administrator, I don't know what I don't have access to. =( Any thoughts?
I did see this post, which doesn't look good. =(
I also saw this: "Data connections for browser forms should be converted to UDC files." I have not done that. Should I??

I converted the SPSubmit to a UDC file. Still getting the same error. Should I convert the "Retrieve" data connections also? (There are a lot of them, so don't want to unless I have to!)

Re: Error on Submit

klink — Wed, 01 Oct 2014 12:46:16 GMT

Okay, back on track. Started over. Form comes up with data, but on SubmitToSharePointList getting this:

Access denied. You do not have permission to perform this action or access this resource.

Since I'm a site administrator, I don't know what I don't have access to. =( Any thoughts?

I did see this post, which doesn't look good. =(

I also saw this: "Data connections for browser forms should be converted to UDC files." I have not done that. Should I??

Re: Error on Submit

klink — Mon, 29 Sep 2014 20:51:32 GMT

Redeployed and still have the same error. I do notice something, however. If I look at the properties of the form in the form template library, it says it's Version is 1.0.0.39. However, the form is version 1.0.0.48

Unable to deactivate. ARGH! Developer rebooting farm tonight. More tomorrow...

Re: Error on Submit

klink — Mon, 29 Sep 2014 18:53:29 GMT

Developer says I have to wait until 3:00 to redeploy. =/ I will do what you say and try it!

Re: Error on Submit

Hilary Stoupa — Mon, 29 Sep 2014 18:06:47 GMT

You are admin deploying the template, right? And it is used in the browser? How about trying setting the template to full trust and redeploy it?

Re: Error on Submit

klink — Mon, 29 Sep 2014 17:54:41 GMT

The lists are on the same site collection as the form, but in a subsite of the location of the form template.

Re: Error on Submit

Hilary Stoupa — Mon, 29 Sep 2014 16:53:08 GMT

Isn't that just the URL generated by IPFS when you open the form in SharePoint?

I can't imagine there is a way around that. That is the URL from SharePoint when you try to open the browser form. Unless you have a link someplace that is being used to open the form?

The form does have list data connections that execute when the form is opened. Are those lists on the same site the form is currently being used on?

Re: Error on Submit

klink — Mon, 29 Sep 2014 16:45:17 GMT

That's correct. ARGH! The developer is asking about the "clientinstalled=true" statement, and if that can be removed. Not sure if he's grasping, or if this is a legitimate request. Thoughts?

Re: Error on Submit

Hilary Stoupa — Mon, 29 Sep 2014 16:36:06 GMT

Hmmm. Opens with no data? So, it was opening with data before we made this minor rule change, you then re-published it, and now you get errors on queries that were succeeding before?

Re: Error on Submit

klink — Mon, 29 Sep 2014 16:22:09 GMT

Thanks! I had guess right! Deployed and now it opens with no data...getting this error:

====================================================================================================

You do not have permissions to access a SharePoint list that contains data required for this form to function correctly.
An entry has been added to the Windows event log of the server.

Log ID:5566

Correlation ID:41caff53-d035-4b78-b58f-a03169f7fc55

You do not have permissions to access a SharePoint list that contains data required for this form to function correctly.

An entry has been added to the Windows event log of the server.

Log ID:5566

Correlation ID:41caff53-d035-4b78-b58f-a03169f7fc55

You do not have permissions to access a SharePoint list that contains data required for this form to function correctly.

An entry has been added to the Windows event log of the server.

Log ID:5566

Correlation ID:41caff53-d035-4b78-b58f-a03169f7fc55

=====================================================================

From the developer:

The following query failed: Retrieve Agency Type (User: 0#.w|ffbhnts\linkats, Form Name: Fidelity.CSP.CA.Template, IP: , Connection Target: , Request: http://collab.boystown.org/_layouts/FormServer.aspx?XsnLocation=/sites/Fidelity/FormServerTemplates/Fidelity.CSP.CA.Template.xsn&ClientInstalled=true&Source=http://collab.boystown.org/sites/Fidelity/FormServerTemplates/Forms/All%2520Forms.aspx&DefaultItemOpen=1, Form ID: urn:schemas-microsoft-com:office:infopath:Fidelity-CSP-CA-Template:-myXSD-2014-09-03T15-59-06 Type: DataAdapterException, Exception Message: The form cannot run the specified query. The list could not be found.)

He's looking at it, but wondered if you had an idea as to why this happened?