{"id":1018,"date":"2010-05-08T20:58:16","date_gmt":"2010-05-09T01:58:16","guid":{"rendered":"http:\/\/blogs.devhorizon.com\/reza\/?p=1018"},"modified":"2010-05-13T07:43:16","modified_gmt":"2010-05-13T12:43:16","slug":"sharepoint-administration-toolkit-getbyprincipalid-method-call","status":"publish","type":"post","link":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/","title":{"rendered":"SharePoint Administration Toolkit & GetByPrincipalId() Method Call"},"content":{"rendered":"

<\/a><\/a>SharePoint Administration Toolkit<\/a> ships with a very handy tool that’s installed at web site level (SPWeb) named Check Effective Permissions. Essentially, this tool checks to see if a SPPrincipal <\/a>object has got permissions to any objects within the current web site and all the sub sites that inherit<\/u> <\/strong>from the current site. It also provides other permission related reports such as anonymous access level or other factors that effect the level of access for the given SPPrincipal object.<\/p>\n

<\/a><\/p>\n

<\/a><\/p>\n

\"checkeffectivepermissions.PNG\"<\/a>\u00a0<\/p>\n

Sometimes when you use the tool, it throws the “Value does not fall within the expected range<\/em>” exception on SPRoleAssignmentCollection.GetByPrincipalId(Int32 principalId) method call. See the stack trace below:<\/p>\n

[Xml]<\/p>\n

Value does not fall within the expected range; at Microsoft.SharePoint.SPRoleAssignmentCollection.GetByPrincipalId(Int32 principalId)
\nat Microsoft.SharePoint.SPRoleAssignmentCollection.GetAssignmentByPrincipal(SPPrincipal principalToFind)
\nat Microsoft.Office.Server.SecurityReport.SecurityReportAccountManager.CheckPermissions(Object contextObject, String username, AclUIMode aclType)
\nat Microsoft.Office.Server.SecurityReport.SecurityReportAccount.BtnCheck_Click(Object sender, EventArgs e)<\/p>\n

….<\/p>\n

[\/Xml]<\/p>\n

In our case, since the exception was only thrown for some SPPrincipal objects, I did a quick analysis and found out that if the SPPrincipal has no role assigned to it (see the figure below), it blows up the API call. I know this may sound kinda bizzare. Why do we need an SPPrincipal without having a role assgined to it? For a number of reasons. For example, you may need to create the groups in advance and assign the permissions later. Or, maybe the\u00a0groups are auto-generated by an import process, but something has gone wrong when assigning the roles. As a result, some groups do not have roles assigned to them.<\/p>\n

\"checkeffectivepermissions_norole.PNG\"<\/a><\/p>\n

<\/a><\/p>\n

<\/a><\/p>\n

By the way, people have reported other similar issues on the bottom of this page<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

SharePoint Administration Toolkit ships with a very handy tool that’s installed at web site level (SPWeb) named Check Effective Permissions. Essentially, this tool checks to see if a SPPrincipal object has got permissions to any objects within the current web site and all the sub sites that inherit from the current site. It also provides […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43],"tags":[],"class_list":["post-1018","post","type-post","status-publish","format-standard","hentry","category-moss-2007"],"_links":{"self":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/comments?post=1018"}],"version-history":[{"count":0,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1018\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/media?parent=1018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/categories?post=1018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/tags?post=1018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}