HTTP Error 403 When Viewing a Flowtime Site or Page

Description

When viewing a Flowtime site or page, you intermittently receive an HTTP error 403: Forbidden.

Cause

Generally, the error occurs when a request from an authenticated user that does not have local admin privileges results in a failed read of the /BIN directory by the impersonating w3wp.exe file (IIS worker process for ASP.NET) process. This behavior is associated with insufficient permission to the temporary /BIN directory, where ASP.NET assemblies are Just In Time (JIT) compiled.

Affected Versions

All versions

Solution

The Authenticated Users or <SERVER NAME>\Users group (which generally contains DOMAIN\Users group) must have the following permissions on the /BIN folder below the following path: C:\inetpub\wwwroot\wss\VirtualDirectories\{Sitename80}

  • Read & Execute
  • List Folder Contents
  • Read

Follow the procedure to grant the required permissions.

  1. Open Windows Explorer and navigate to the /BIN directory of your Web application.
  2. Right-click the folder, and select Properties.
  3. Click the Security tab, and select Edit.
  4. Click Add, and add the local server group Authenticated Users or <SERVER NAME>\Users group (which generally contains DOMAIN\Users group).
  5. Select the following permissions.
    (Note: if you plan to add Everyone to the /BIN folder, only grant Read permission).
    • Read & Execute
    • List Folder Contents
    • Read
  6. Click OK to apply the new settings.
  7. Refresh the Web page.

For additional information, see this article.