1

I am trying to create a 2013 workflow that uses an App step to break inheritance on a form library and give individual forms unique permissions. I am having problems, and constantly receiving "Unauthorized" Status from my Http calls.

I think the problem is in my App Permissions. What is this "Content" word they are using? Am I literally placing content in the URI?

  <AppPermissionRequests>
    <AppPermissionRequest   Scope="http://domain/content/sites/workflows/" Right="FullControl"/>
  </AppPermissionRequests>

Is this the correct way? Or is "/sites" unnecessary since the site collection is different in the content URI? should it just be "domain/content/workflows"?

This should give permissions to the whole site collection. So can I use subsite libraries and still break permissions and set my own?

Improve this question
1

1 Answer 1

Reset to default
2

I believe the scope you want to use for your AppPermissionRequest is "http://sharepoint/content/sitecollection" (I've successfully used this for Workflow app steps in the past). Note that you want to use this literal string and not replace any of it with URLs from your SharePoint farm.

"Content" refers to your content database.

Table 1 at this MSDN article describes the four different scopes you can use: https://msdn.microsoft.com/en-us/library/office/fp142383.aspx

Your choices are:

From the article: "Because permission requests are made without information about the topology of the site collection where the app is installed, the scope is expressed as a type instead of as the URL of a specific instance. These scope types are expressed as URIs. Permissions to resources that are stored in the SharePoint content database are organized under the following URI: http://sharepoint/content."

Improve this answer
3
  • I think I get it thanks. Just to clarify, I'm using the site collection APP Id, and adding sharepoint/content/sitecollection
    – christopher clark
    May 5, 2015 at 14:24
  • 2
    The full permissions string you want to use is <AppPermissionRequests><AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl"/></AppPermissionRequests>
    – Pete Rijks
    May 5, 2015 at 17:53
  • The App ID depends on if you're deploying an app of your own or if you're just trying to use an App step in a 2013 workflow that you're creating in SharePoint designer.
    – Pete Rijks
    May 5, 2015 at 17:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.