403 Forbidden error when configuring Sharepoint Repository with Group Site

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.1.10 DXP FP15, Master
• Fix Version/s: 7.2.X, 7.3.10 DXP GA1, Master
• Component/s: External Document Repositories > Sharepoint
• Labels:
  • ee-ts
• Branch Version/s:
  7.2.x
• Backported to Branch:
  Committed
• Fix Priority: 3
• Bug Type: Accessibility

Description:
When configuring Sharepoint Repository with a Group Site, the documents page is blank and a 403 Forbidden error is thrown in the logs. Note: The connection appears to be successful with the home site.

Steps to Reproduce:
1. Set up Sharepoint Repository and create a group site
2. Go to Documents and Media and click on [+] > Repository
3. In the repository type selection box, select the created Sharepoint Repository
4. In Site Absolute URL, put https://[NAME].sharepoint.com/sites/[groupsitename]
5. In Library Path, put the Sharepoint Document Library (e.g. "Documentos compartidos")

Expected Result:
Sharepoint Document Library is mounted successfully and documents are accessible

Actual Result:
The document page is blank, and 403 Forbidden error is thrown:

2020-03-24 16:47:17.751 ERROR [https-jsse-nio-8443-exec-3][IncludeTag:128] Current URL /group/guest/~/control_panel/manage?p_p_id=com_liferay_document_library_web_portlet_DLAdminPortlet&p_p_lifecycle=0&p_p_state=maximized&p_p_mode=view&_com_liferay_document_library_web_portlet_DLAdminPortlet_mvcRenderCommandName=%2Fdocument_library%2Fview_folder&_com_liferay_document_library_web_portlet_DLAdminPortlet_redirect=https%3A%2F%2Flocalhost%3A8443%2Fgroup%2Fguest%2F~%2Fcontrol_panel%2Fmanage%3Fp_p_id%3Dcom_liferay_document_library_web_portlet_DLAdminPortlet%26p_p_lifecycle%3D0%26p_p_state%3Dmaximized%26p_p_mode%3Dview&_com_liferay_document_library_web_portlet_DLAdminPortlet_folderId=34174 generates exception: com.liferay.portal.kernel.exception.SystemException: com.liferay.portal.kernel.security.auth.PrincipalException: Unable to get https://liferaycolab.sharepoint.com/sites/collaboration/_api/web/GetFolderByServerRelativeUrl('Documentos compartidos')/Files?$select=Author/Title,CheckedOutByUser/Title,Length,ListItemAllFields/EffectiveBasePermissions,Name,ServerRelativeUrl,TimeCreated,TimeLastModified,Title,UIVersion,UIVersionLabel&$expand=Author,CheckedOutByUser,ListItemAllFields: 403 Forbidden
com.liferay.portal.kernel.security.auth.PrincipalException: Unable to get https://liferaycolab.sharepoint.com/sites/collaboration/_api/web/GetFolderByServerRelativeUrl('Documentos compartidos')/Files?$select=Author/Title,CheckedOutByUser/Title,Length,ListItemAllFields/EffectiveBasePermissions,Name,ServerRelativeUrl,TimeCreated,TimeLastModified,Title,UIVersion,UIVersionLabel&$expand=Author,CheckedOutByUser,ListItemAllFields: 403 Forbidden
	at com.liferay.sharepoint.rest.repository.internal.document.library.repository.external.SharepointExtRepository._getJSONObject(SharepointExtRepository.java:781)
	at com.liferay.sharepoint.rest.repository.internal.document.library.repository.external.SharepointExtRepository._getExtRepositoryFileEntries(SharepointExtRepository.java:726)
	at com.liferay.sharepoint.rest.repository.internal.document.library.repository.external.SharepointExtRepository.getExtRepositoryObjects(SharepointExtRepository.java:407)
	at com.liferay.sharepoint.rest.repository.internal.document.library.repository.external.SharepointCachingExtRepository.getExtRepositoryObjects(SharepointCachingExtRepository.java:315)
	at com.liferay.document.library.repository.external.ExtRepositoryAdapter.getFoldersAndFileEntries(ExtRepositoryAdapter.java:572)
	at com.liferay.document.library.repository.external.ExtRepositoryAdapter.getFoldersAndFileEntriesCount(ExtRepositoryAdapter.java:604)
	at com.liferay.portal.kernel.repository.BaseRepositoryImpl.getFoldersAndFileEntriesAndFileShortcutsCount(BaseRepositoryImpl.java:327)
	at com.liferay.portal.kernel.repository.Repository.getFoldersAndFileEntriesAndFileShortcutsCount(Repository.java:182)
	at com.liferay.portal.repository.util.RepositoryWrapper.getFoldersAndFileEntriesAndFileShortcutsCount(RepositoryWrapper.java:523)
	at com.liferay.portal.repository.capabilities.CapabilityRepository.getFoldersAndFileEntriesAndFileShortcutsCount(CapabilityRepository.java:662)
	at com.liferay.portlet.documentlibrary.service.impl.DLAppServiceImpl.getFoldersAndFileEntriesAndFileShortcutsCount(DLAppServiceImpl.java:1591)
	at com.liferay.portlet.documentlibrary.service.impl.DLAppServiceImpl.getFoldersAndFileEntriesAndFileShortcutsCount(DLAppServiceImpl.java:1578)
	at com.liferay.portlet.documentlibrary.service.impl.DLAppServiceImpl.getFoldersAndFileEntriesAndFileShortcutsCount(DLAppServiceImpl.java:1568)
	at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:153)
	at com.liferay.portal.spring.transaction.DefaultTransactionExecutor._execute(DefaultTransactionExecutor.java:203)
	at com.liferay.portal.spring.transaction.DefaultTransactionExecutor.execute(DefaultTransactionExecutor.java:94)
	at com.liferay.portal.spring.transaction.TransactionInterceptor.invoke(TransactionInterceptor.java:110)
	at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:130)
	at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(ChainableMethodAdvice.java:55)
	at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:130)

Reproduced on:
Tomcat 9.0.17 + MySQL 5.7.
Liferay 7.2 DXP GA1 + FP15
Liferay REST Connector to SharePoint version=2.0.0