Unable to perform People search in SharePoint 2016

Bharat 21 Reputation points
2020-08-18T23:19:10.377+00:00

Unable to perform people search in Sharepoint 2016.

Users are trying to perform a people search and its giving an error following a correlation id.

While check this error through the developer tools , receiving 403 forbidden error for the below REQUEST URL

Request Method: POST

https://Sitecollection/_vti_bin/client.svc/ProcessQuery

Users have "Read" access to the search page.

ULS log gives the following error:

The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your operation again.

SPRequest.ValidateFormDigest: UserPrincipalName=i:0).w|s-1-5-21-89-2-128-349, AppPrincipalName= ,bstrUrl=https://searchsite collection ,bstrListName=<null>

Microsoft.SharePoint.SPException: The security validation for this page is invalid and might be corrupted. Please use your web browser's Back button to try your operation again. ---> Microsoft.SharePoint.Client.ClientServiceException: The security validation for this page is invalid and might be corrupted. Please use your web browser's Back button to try your operation again. -
-- End of inner exception stack trace ---
at Microsoft.SharePoint.Client.SPClientServiceHost.ValidateFormDigest(HttpContext context)
at Microsoft.SharePoint.Client.SPClientServiceHost.OnBeginRequest()
at Microsoft.SharePoint.Client.ClientRequestServiceImpl.ProcessQuery(Stream inputStream, IList`1 pendingDisposableContainer)

============================================================================================================

The same page is working fine/showing results when "users" are added to "Full Control" SharePoint group

Could anyone share some idea on how to fix this.

SharePoint Server Management
SharePoint Server Management
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Management: The act or process of organizing, handling, directing or controlling something.
2,791 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Bharat 21 Reputation points
    2020-08-19T03:11:52.5+00:00

    @Itch Sun-MSFT
    I created a new permission level copying the "Contribute" permission level. Removed the options which will allow users to delete the content when they have "contribute" permission. I granted test account , the new permission level, it worked fine. the results appeared. However my client doesn't want end-users granted "Contribute" permission to the search page. They want search to work with "Read" permission (which was working fine before).Recently we applied the April 2020 security patch to the SP 2016 env.
    The search page just gave me a correlation id. Based on the correlation id, i see the below in the ULS log.
    The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your operation again.

    I tried using the developer tools and was able to track the below error.
    403 forbidden error for the below REQUEST URL

    Request Method: POST
    https://Sitecollection/_vti_bin/client.svc/ProcessQuery