search

SharePoint / sp-dev-docs

SharePoint & Viva Connections Developer Documentation
https://docs.microsoft.com/en-us/sharepoint/dev/
Creative Commons Attribution 4.0 International
1.24k stars 1k forks source link

Applying permissions on Form Customizer #8372

Closed legenam closed 1 year ago

legenam commented 2 years ago

After implementing Form customizer on a SharePoint Online list, I identified that any instance shouldn't be created in any site where component neet to be user. The serve.json is the only link between component and list. How should it work for permissions? Currently, only admin or site collection owners can use it and I don't find any information about it for giving access to contributors? How to solve it?

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ghost commented 2 years ago

Thank you for reporting this issue. We will be triaging your incoming issue as soon as possible.

AJIXuMuK commented 2 years ago

@legenam - could you please describe you issue in more details? What type of permissions are you referencing to? Who has access to the form or who can add the form customizer to the list/content type?

legenam commented 2 years ago

@AJIXuMuK After deploying the solution on a site collection app catalog, defining permissions on this app and to the list linked to this component, a user with Contributor role received an access denied error wehn clikc on New or when try to edit an item. When SPListForm.aspx is loaded the user doesn't seems to have enough right permissions.

NB: The Form has been linked through PowerShell Script. The site collection owner does'nt receive any error message and everything works fine.

AJIXuMuK commented 2 years ago

@legenam - that seems weird. I've just tested the same scenario and have no issues. Does a Contributor user have access to the site itself or to the list only?

legenam commented 2 years ago

@AJIXuMuK The use is Visitor (Read-Only) on the site and has 'Collaborate' permission level on the list.

AJIXuMuK commented 2 years ago

Thank you @legenam for the additional details. The fix has been done. It will take few weeks though to be rolled out WW.

AJIXuMuK commented 1 year ago

this should be rolled out

ghost commented 1 year ago

Issues that have been closed & had no follow-up activity for at least 7 days are automatically locked. Please refer to our wiki for more details, including how to remediate this action if you feel this was done prematurely or in error: Issue List: Our approach to locked issues