How to get permission of a sharepoint list for a user using REST api

Question

I have a requirement where i need to check the access permission of a user against a List or Library only using REST api from my remote salesforce app.

Say for example, I have to send the list name and user name, and get the result as Read, Write, Contribute(Manage), None. I need to display what permission does that user have for that List.

How do I achieve this. Please help me. Thanks in advance.

Answer 1

Use EffectiveBasePermissions to get permissions of the user on a list. Example:

http://aissp2013/sites/Team/_api/web/lists/getbytitle('L2')/EffectiveBasePermissions

Note that this will give the permissions of the logged in user. However, if the need is to check for other users permission while being logged in using as a different user then as suggested by @Amit, use getusereffectivepermissions. In any case the end result is high and low permission masks which don't make much sense and a way to decipher what permissions a user has is to use SP.BasePermissions().has as can be seen in below example:

function checkPermissions() {
    var call = jQuery.ajax({
        url: _spPageContextInfo.webAbsoluteUrl +
            "/_api/Web/effectiveBasePermissions",
        type: "GET",
        dataType: "json",
        headers: {
            Accept: "application/json;odata=verbose"
        }
    });

    call.done(function (data, textStatus, jqXHR) {
        var manageListsPerms = new SP.BasePermissions();
        manageListsPerms.initPropertiesFromJson(data.d.EffectiveBasePermissions);

        var manageLists = manageListsPerms.has(SP.PermissionKind.manageLists);

        var message = jQuery("#message");
        message.text("Manage Lists: " + manageLists);
    });
}

Answer 2

You could consider the following approach to get List permission levels/roles:

• get the List effective permissions using /_api/web/lists/getbytitle('<list title>')/getusereffectivepermissions endpoint
• determine user roles using SP.BasePermissions.has(perm) Method

JavaScript example

function getListUserEffectivePermissions(webUrl,listTitle, accountName) 
{
    var endpointUrl = webUrl +  "/_api/web/lists/getbytitle('" + listTitle + "')/getusereffectivepermissions(@u)?@u='" + encodeURIComponent(accountName) + "'";
    return $.getJSON(endpointUrl);
}

function parseBasePermissions(value)
{
    var permissions = new SP.BasePermissions();
    permissions.initPropertiesFromJson(value);
    var permLevels = [];
    for(var permLevelName in SP.PermissionKind.prototype) {
        if (SP.PermissionKind.hasOwnProperty(permLevelName)) {
            var permLevel = SP.PermissionKind.parse(permLevelName);
            if(permissions.has(permLevel)){
                  permLevels.push(permLevelName);
            }
        }     
    }
    return permLevels;   
}

Usage

var webUrl = _spPageContextInfo.webAbsoluteUrl;  
getListUserEffectivePermissions(webUrl,'Documents','i:0#.f|membership|[email protected]')
        .done(function(data){
            var roles = parseBasePermissions(data);
            console.log(roles); 
        });

Result

["emptyMask", "viewListItems", "addListItems", "editListItems", "deleteListItems", "openItems", "viewVersions", "deleteVersions", "managePersonalViews", "viewFormPages", "open", "viewPages", "createSSCSite", "browseDirectories", "browseUserInfo", "addDelPrivateWebParts", "updatePersonalWebParts", "useClientIntegration", "useRemoteAPIs", "createAlerts", "editMyUserInfo"]

Answer 3

Below is the REST endpoint for getting effective permission

/getusereffectivepermissions(@user)?@user='<user login name>'

Check below url: https://msdn.microsoft.com/en-us/library/office/dn531433(v=office.15).aspx#bk_ListGetUserEffectivePermissions

Answer 4

This should do the job you need:

http://yourserver/yoursite/_api/lists/getbytitle('yourlisttitle')/RoleAssignments/GetByPrincipalId(idOfTheUserOrGroup)/RoleDefinitionBindings

Be aware, that there is no such as elevated permissions in the client side APIs, so the user executing the code should have the right to read permissions.