Unauthorized user able to create posting !!!!!!

This case was reported on microsoft.public.cmserver.general group

Case:
We have multiple websites hosted on the same CMS farm by mapping Channel Names to Host Header Names. On one of the sites any user whose is a member our AD group can create new page/posting even though they are not assigned any role in the CMS system. This happens only on one site among the several sites in the server.
Have anyone come across this issue before.

Answer:
please check your rights groups.
Sounds as if the guest account has been assigned to a non-Subscriber rights group.
This is not supported and will lead to such an issue.

Answered by: Stefan Goßner

The remote server returned an error: (401) Unauthorized

I get an HTTP 401 error in Site Manager when trying to export or import items. What might be causing the problem?
Answer
1 - Ensure that the 'ASPNET' account has the "Impersonate a client after authentication" privilege.
2 - Ensure that the /MCMS virtual directory has anonymous access enabled.
3 - Ensure that the /NR virtual directory has anonymous access enabled.

Failures occurred during multi-object rollback. The session transaction was rolled back. Contact the site administrator

As usual I came yesterday to my office and opened the mail then I found mail from client say “very urgent- CMS error” opppppppppps, site is up and running since 6 months so what happen?

So I told them that the problem will be one of the following


1 – Transaction log reached very big size and I recommended to them these articles

Microsoft.com
http://www.banmanpro.com/support/logfiles.asp .



Finally the error was because they did replication to the database.

Creat New Page error

Today I had a critical demo on staging server and while I’m trying to create new post I got this error Contact the Web site administrator if you believe this directory should allow execute access. The problem was in the IIS that I should allow scripts and executables in the execute permission

How to: Customize the Variation Root Landing Logic

When you provision a site collection in Microsoft Office SharePoint Server 2007 and configure variations, Office SharePoint Server 2007 does the following:

• Creates a page in the variation home site named VariationRoot using the VariationRootPageLayout.aspx page layout file in the Master Page and Page Layouts Gallery.


• Replaces the default Welcome page of the Variation home site with the VariationRoot page.

Read More

How to: Deploy Content Between Servers

This code example shows how to use the object model to create paths and jobs that deploy content between site collections. This code assumes that the source and destination site collections are in the same server farm. However, paths can be configured between different server farms. The tasks this code performs can also be done through the user interface in SharePoint Central Administration.

Read More

Custom Document to Page Converters

The document to Web page conversion process is built on the document converter infrastructure in Microsoft Office SharePoint Server 2007. And, just like the document converter infrastructure, it also provides developers with the ability to create their own custom document converters.

Read More

Web Content Management: Overview

Web content management systems allow nontechnical users to author and manage branded content on the Web with minimal involvement from IT. These systems typically include:

• Simple end-user page authoring experience


• Separation of branding (presentation) from content


• Controlled publishing


• Site management tools

Read More

Application Integration Scenarios with SharePoint 2007 Technologies

Kailash Kalyani will introduce a session in MDC 2007 about Application Integration Scenarios with SharePoint 2007 Technologies, it’s very important session about how to integrate with SharePoint 2007. See you their all.
Session time - Day Three - 07 Feb 2007
Room - Khafraa A

MDC 2007 knocks the doors

MDC 2007 is the biggest Developers' Conference of the year in the Middleeast, and is a critical event for any developer who wants to see the newest as well as the next-generation technology. MDC07 is full of sessions and activities that help you learn the current and future of the Microsoft platform and get to know people who are as passionate about software as you are.

Who should attend MDC 2007?

MDC 2007 is the "must-attend" event for enterprise developers, software architects, software engineers, Web developers, and Web development managers wanting to stay in sync with Microsoft's platform roadmap.