PermissionMask check failed. asking for 0x00000015, have 0x3C4312EF

Posted on 2009-12-30
Last Modified: 2012-06-27
I have a SharePoint Farm with 19 site collections, each with its own application pool.  One site collection has some custom code and workflows that were developed by our in house Software team.  We have some custom crawls setup that use the BDC to access data from DB's outside the farm.  This site collection has over 2000 sites.  The site collection has caused issues 3 times over the last 4 weeks in which it begins to consume memory and cpu until the WFE becomes unresponsive.

This happened last night and I've been looking through the logs and I keep seing the same entry repeated

12/29/2009 16:59:51.23       w3wp.exe (0x191C)                             0x17B4      Windows SharePoint Services         General                             8xfr      Verbose       PermissionMask check failed. asking for 0x00000015, have 0x3C4312EF      

The farm used Kerberos authentication and consists of
 1 WFE
1 App server hosting the search index and Excel Services
Clustered SQL

I also see event id errors 27745

Event Type:      Error
Event Source:      Windows SharePoint Services 3
Event Category:      General
Event ID:      27745
Date:            12/29/2009
Time:            5:44:02 PM
User:            N/A
Computer:      SRMOSSFE1
The description for Event ID ( 27745 ) in Source ( Windows SharePoint Services 3 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: #50071: Unable to connect to the database SharePoint_Config on srsql2005prod2.  Check the database connection information and make sure that the database server is running..

I've searched the web and I cannot figure out why the entry in the SharePoint log is firing.  Does anyone know what is causing this?

8xfr      Verbose       PermissionMask check failed. asking for 0x00000015, have 0x3C4312EF
Question by:james_higgs
    LVL 12

    Accepted Solution

    LVL 19

    Assisted Solution

    I've read up on some stuff online, root cause I haven't found, but have you tried backing the site collection up and restoring it to a new site collection?
    I know it sounds weird that it'll fix it, but this blog post seems to say so:

    A permission mask is defined here:

    After further reading it seems that the values in "asking for 0x00000015, have 0x3C4312EF" mean that you require permission A (being 0x00000015) and that you have permission level B (0x3C4312EF)

    What these values mean can be found here:

    Strangely enough your values aren't in that list.

    If I look more into detail of your question, part of the error is that you seem to be unable to connect to your configuration database. Have you checked the identity under whch the application pool is running and have you checked that it has the necessary access to your SQL db?

    Author Comment

    Thank you for your responses.

    I have also read that restoring a backup of the site collection will resolve the issues. However, I'm trying desperately to avoid that.

    Since my values are not present I'm beginning to think my value may be a custom permission developed by our software team. I'm not sure that they would/could do this.

    Also, in this article there is a note stating the following: Certain objects implement the IDisposable interface, and you must avoid retaining these objects in memory after they are no longer needed. For information about good coding practices, see Best Practices: Using Disposable Windows SharePoint Services Objects.
    I've brought this up with our development team and they are checking to ensure that this is not occuring.  To me it seems that something like this is occuring and triggering the high resource utilization.
    I'll provide an update once I have a response from the development team.
    Once again, thanks for the responses.  If you have any additional thoughts, I'm all ears.

    LVL 19

    Expert Comment

    You can restore your site collection to a new site collection and check if that fixes the issue. It is a good check to see if your backup / restore works fine and you will be able to keep the old site collection running at the same time.

    Author Comment

    The developers have checked on piece of custom code and did not find anything.  There is one other area of custom code they are checking.  I'll provide an update as soon as they are finished.

    Author Closing Comment

    These solutions were very helpful in guiding me to the area of SharePoint that requires attention.  The development team is using this to review their custom code to ensure they are not causing this issue.  Although this review is incomplete, these responses have been key in guiding us to the area causing the problem.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Join & Write a Comment

    Note:  There are two main ways to deploy InfoPath forms:  Server-side and directly through the SharePoint site.  Deploying a server-side InfoPath form means the form is approved by the Administrator, thus allowing greater functionality in the form. …
    If you create your solutions on SharePoint sooner or later you will come upon a request to set  permissions of the item depending on some of the item's meta-data - the author, people assigned as approvers, divisions, categories etc. The most natu…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now