I have created a simple SharPoint-hosted app. I have modified the manifest file and added Full Control permission to List scope. I created a list in one of my SharePoint sites with unique permissions (break inheritance). I deployed the SharePoint-hosted app to the web site and chose the list when it asked to choose a list. I logged on to the site using a user which has no permissions on the list. The user can click on the app and get information from a list which he has no permissions on it.
How do I restrict the app so that the user gets an error message when the user runs the app, Without changing the code. I mean I don't want to check the user's permissioins on the list using code.
0 commentaires:
Enregistrer un commentaire