{"id":1462,"date":"2012-09-04T11:04:04","date_gmt":"2012-09-04T09:04:04","guid":{"rendered":"http:\/\/www.itidea.nl\/?p=1462"},"modified":"2012-08-30T12:43:05","modified_gmt":"2012-08-30T10:43:05","slug":"office-365-enterprise-preview-permissions-on-list-type-in-an-app","status":"publish","type":"post","link":"https:\/\/www.itidea.nl\/index.php\/office-365-enterprise-preview-permissions-on-list-type-in-an-app\/","title":{"rendered":"Office 365 Enterprise Preview – Permissions on list type in an app"},"content":{"rendered":"

When developing an app for SharePoint permissions can be set on items in the host web, such as access to lists. The host web is the website to which an app for SharePoint is installed.<\/p>\n

An app for SharePoint has its own identity and is associated with a security principal, called an app principal. Like users and groups, an app principal has certain permissions and rights. The app principal has full control rights to the app web so it only needs to request permissions to SharePoint resources in the host web or other locations outside the app web.<\/p>\n

Using Microsoft Napa Office 365 Developer Tools these permissions can be set in the properties of the app using some kind of slider.
\n\"\"<\/a><\/p>\n

After installing the app this is the result:
\n\"\"<\/a><\/p>\n

The user can select one list out of all available lists the user has access to.<\/p>\n

A better approach would be to help the user pick a specific (kind of) list, not letting the user pick from all lists in the web. This can be accomplished by editing the AppManifest in Visual Studio through a nice looking designer:
\n\"\"<\/a><\/p>\n

At the Permission requests<\/em> section the column Properties<\/em> a BaseTemplateId can be filled in to filter the lists the user can choose from. The BaseTemplateId is the numerical equivalent of the list base template, for example 100 represents a generic list, 101 a document library.
\n\"\"<\/a><\/p>\n

In xml this looks like:<\/p>\n

\r\n\u00a0 <AppPermissionRequests>\r\n\u00a0\u00a0\u00a0 <AppPermissionRequest Scope="http:\/\/sharepoint\/content\/sitecollection\/web\/list" Right="Read" >\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 <Property Name="BaseTemplateId" Value="101" \/>\r\n\u00a0\u00a0\u00a0 <\/AppPermissionRequest>\r\n\u00a0 <\/AppPermissionRequests>\r\n<\/pre>\n
This results in the following list:
\n\"\"<\/a><\/p>\n
It looks like multiple properties can be defined, and you can:<\/p>\n
but an additional BaseTemplateId won\u2019t recognized and the filter of list types isn\u2019t amended to the property settings.<\/p>\n
You aren\u2019t able to add another List scoped permission request in the designer, other scoped items can be added, also once per AppManifest.<\/p>\n
The xml can be amended with another List scoped permission request, but only the first one defined is active.<\/p>\n
One gotcha: Once the app is installed and permissions link is selected there is no possibility to view the list its current permission setting. The first list in the dropdown is selected…<\/p>\n
For example Trust library Site Assets:
\n\"\"<\/a><\/p>\n
Request permissions of the app:
\n\"\"<\/a>
\n\"\"<\/a><\/a><\/p>\n
And the first library is selected… hope Microsoft is going to fix this one\u2026<\/p>\n
Disclaimer: SharePoint 2013 is in preview at time of this writing, so things may change between now and release date.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"
When developing an app for SharePoint permissions can be set on items in the host web, such as access to lists. The host web is the website to which an app for SharePoint is installed. An app for SharePoint has … Read More »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,35],"tags":[44],"class_list":["post-1462","post","type-post","status-publish","format-standard","hentry","category-sharepoint-2010","category-sharepoint-2013","tag-sharepoint-2013"],"_links":{"self":[{"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/posts\/1462","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/comments?post=1462"}],"version-history":[{"count":9,"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/posts\/1462\/revisions"}],"predecessor-version":[{"id":1481,"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/posts\/1462\/revisions\/1481"}],"wp:attachment":[{"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/media?parent=1462"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/categories?post=1462"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itidea.nl\/index.php\/wp-json\/wp\/v2\/tags?post=1462"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}