Logo 
Search:

Sharepoint Forum

Ask Question   UnAnswered
Home » Forum » Sharepoint       RSS Feeds

Calling Webs.asmx WSS web meb methods require Admin privilege?

  Asked By: Christopher    Date: Aug 31    Category: Sharepoint    Views: 3788

We are developing a console application in .net called "WSS
crawler". This app takes a list of top level team sites as seedlist,
and starts crawling each of the team site and gets the userinfo,
site info and all the sub site info of these sites. It then updates
a custom database with all these information. Later we use this info
to display the "WSS workspaces" as a web part, for which the current
user is a member, by querying this custom database.


My question is:
In the crawler code, we are using /_vti_bin/Webs.asmx web service to
get the current site info(GetWeb() web method) and to get all the
sub sites of the current site (GetWebcollection() web method.)

1. The problem is, the GetWeb() web method expects the user to be
atleast reader() role on the site. The GetWebcollection() method
will expect more privilege, that reader, It expects Admin or atleast
contributor privilege. Other wise we get "401 Access denied" error.

The problem is, we want to make the crawler a Generic solution in
our organization. That means, we can give any top level team site as
a seedpoint to the crawler, it should crwl it without any access
denied error and get all sub site information in a recursive basis
(i.e all sub sites, their sub istes etc.. sub istes in alll level)

To do this, we have to add a user account as admin/contributor in
all the sites ans sub sites of all the level (imagine 100's of such
sites and sub sites). This is very difficult.

So
1. Is there a way to solve our [problem? Will it be possible by any
means to call GetWebCollection() and GetWeb() web methods without
adding the user as admin/contributor to each site?

2. WSS web services will not allow anonymous access it it?

3. Any other alternative to solve our issue?

Share: 

 

11 Answers Found

 
Answer #1    Answered By: Maya Lewis     Answered On: Aug 31

Can you create a new credential that is based on the site admin  and pass
that credential to the Web Service?

 
Answer #2    Answered By: Paola Mcmahon     Answered On: Aug 31

You might want to save yourself a lot of anguish, time, and money
over building this yourself, and go with an off the shelf solution.
Coveo Enterprise Search for SharePoint (SPS or WSS 2003) does what you
need (security), and much much more (about 50 more features and
capabilities). Customers like Fannie Mae and PRTM are using Coveo for
SharePoint. The download off our site  does not have the SharePoint bits
in it; if you'd like to evaluate, let me know and I can send you the
license and the connector download. I'm sure your next thought is
price. We are very reasonably priced, server fee plus a small per seat
cost (like CALs).

 
Answer #3    Answered By: Justin Mckee     Answered On: Aug 31

I'm pretty sure he didn't ask for a searching solution. He's looking to
enumerate information  from subsites to populate a higher level  database,
and some of the stuff he's trying isn't working.

If he wanted a solution for search, I'm sure he might appreciate the
advertisement. But when the advertisement posted is not directly
related to the issue posted, all too often responses like that appear to
be unsolicited commercial bulk newsgroup postings.

I'm sure you didn't want to come across that way; I apologize if this
seems harsh;

o that my post actually has some merit instead of
100% scolding...



I don't have an answer for you, but I'm interested in doing something
very similar. When I get that solved or find the answer, I'll post
back. In my case, I want to enumerate subsite or workspace information
and roll it up into a higher level site  so that all the information is
summarized and easy to see at a glance. I also want the summary
information to be able to be displayed and collected via some privileged
account and not rely on the user's credentials, but then when they try
to go to the site, then naturally I want normal credentials to apply.


 
Answer #4    Answered By: Jared Bell     Answered On: Aug 31

I'm pretty sure he didn't ask for a searching solution. He's looking to
enumerate information  from subsites to populate a higher level  database,
and some of the stuff he's trying isn't working.



If he wanted a solution for search, I'm sure he might appreciate the
advertisement. But when the advertisement posted is not directly
related to the issue posted, all too often responses like that appear to
be unsolicited commercial bulk newsgroup postings.



I'm sure you didn't want to come across that way; I apologize if this
seems harsh;



Now to Arun's issue, so that my post actually has some merit instead of
100% scolding...



I don't have an answer for you, but I'm interested in doing something
very similar. When I get that solved or find the answer, I'll post
back. In my case, I want to enumerate subsite or workspace information
and roll it up into a higher level site  so that all the information is
summarized and easy to see at a glance. I also want the summary
information to be able to be displayed and collected via some privileged
account and not rely on the user's credentials, but then when they try
to go to the site, then naturally I want normal credentials to apply.


 
Answer #5    Answered By: Bernice Puckett     Answered On: Aug 31

Having done something similar in a web  part, you need to do this as an admin.
There are methods  in the OM that don't require  admin access, but they only
return the sites  the user  has access to. The rub is you won't pick up any
subsites where the user has permissions to the subsite and not the parent.

In your case, I'd suggest writing a custom  web service. Have the web service
authenticate the user for security (and so you can trim the results for the
user), then access WSS as an administrator using the OM via impersonation so it
has the permissions needed to use the methods you'll need.

 
Answer #6    Answered By: Mackenzie Lewis     Answered On: Aug 31

I would like to use Sharepoint for a fairly rapid fire invoicing system
on our network if it is feasible so we can centralize 7 offices to one
database without all of the hassles of using separate accounting databases
and contact lists etc.. Only 7 columns of data need to be maintained for
each transaction and then filtered.
Date-Customer-Color-Item-Contact-Result-Office.



Currently we use Quickbooks and 7 separate company files but 5 users will no
longer cut it, not to mention the fact that Quick-books and Sharepoint don't
mix very well.



Info-path looks promising as there is no user  limit except for individual
copies but my experience with it is fundamental at best. Is anyone else
using sharepoint as an invoice and reporting platform and if so how are you
implementing it?

 
Answer #7    Answered By: Kurt Gilbert     Answered On: Aug 31

Sorry to be so blunt, but IMHO, you'd be crazy to try to replace a full-featured
accounting system with any custom  solution, there's just too much that goes into
an accounting system, and Quickbooks is dirt cheap.

 
Answer #8    Answered By: Jaya Deoghar     Answered On: Aug 31

But i have few more follow up questions. I agree that, we can write
a custom web  service where we use impersonation to access the WSS
using an "admin account".
But the question  is HOW???: Do I need to add this account as admin
only in the top  level wss  site or in all the sub sites  in the tree
heirarchy? In our case most of the sub sites will not use the same
authenticateion schema inherited from parent. They use its own user
accounts. So, adding a user  account at top level  wss site  doesn't
add that account to the sub sites. By the admin  account of top level
site, I can query all the sub sites of that site. But I cannot query
the sub sites at level2 (sub sites of sub sites), as the first level
sub sites doesn't have the same account as admin. So, inorder to
query all sub sites at any level in hierarchy, all the sub sites
need to have the same account as admin is it?

In our case, the hierachy may contain large number of sub sites, and
adding the account as admin in each level may itseld be headache?

So, is there a solution to this problem?

one alternative could be: adding a local administartor account of
the server where SPS is installed, to query the WSS sites, instead
of "admin" in SPS. Dont know feasibility of this.

PLease suggest some ideas. Any help is really appreciated.

 
Answer #9    Answered By: Candi Branch     Answered On: Aug 31

If you use an account which is a site  collection administrator, they will have
access to all the subsites regardless of the individual permissions.

 
Answer #10    Answered By: Jan Chen     Answered On: Aug 31

Oh, and it should take you around an hour to download, install,
configure, and start secure searching.

 
Answer #11    Answered By: Britni Shepard     Answered On: Aug 31

You need to create a "service" account that's either an Administrator or
SharePoint Administrator on that server. That account will have all rights
needed.

 




Tagged: