Getting the list item Permission using Rest Api

Question

I'm trying to get the list item permission using restapi in asp.net mvc. i had get the permission using below url

https://XXXXX.sharepoint.com/sites/AppDevelopment/PM/Data/_api/web/lists/getbytitle('Task')/items(45)/getusereffectivepermissions('LoginName')

Output

<?xml version="1.0" encoding="UTF-8"?>
-<d:GetUserEffectivePermissions m:type="SP.BasePermissions" xmlns:gml="http://www.opengis.net/gml" xmlns:georss="http://www.georss.org/georss" xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata" xmlns:d="http://schemas.microsoft.com/ado/2007/08/dataservices"><d:High m:type="Edm.Int64">2147483647</d:High><d:Low m:type="Edm.Int64">4294967295</d:Low></d:GetUserEffectivePermissions>

Code i tried

    string requestUrl = string.Format("{0}/_api/web/lists/getbytitle('{1}')/items({2})/getusereffectivepermissions('{3}')", siteUrl, listName, id, HttpUtility.UrlEncode(userName));
    string result = RestApi_GetJsonTemp(accesstoken, requestUrl, "application/json; odata=verbose", "application/json; odata=verbose");
    BasePermissions permissionJson = new BasePermissions();
    using (TextReader sr = new StringReader(result))
    {
        JsonReader jsonreader = new JsonReader(sr, null);
        permissionJson.FromJson(jsonreader);

    }

how to use this high and low value to know what the permission?

Answer 1

The following example demonstrates how to:

• initialize SP.BasePermissions object from json object
• determine user roles using SP.BasePermissions.has(perm) Method

Example:

function getListPermissions(webUrl,listTitle,accountName) 
{
    var endpointUrl = webUrl + "/_api/web/lists/getbytitle('" + listTitle + "')/getusereffectivepermissions(@u)?@u='" + encodeURIComponent(accountName) + "'";
    return $.getJSON(endpointUrl);
}

Usage

var accountName = 'i:0#.f|membership|[email protected]'
var listTitle = 'Tasks';
getListPermissions(_spPageContextInfo.webAbsoluteUrl,listTitle,accountName)
.done(function(data)
{
    var permissions = new SP.BasePermissions();
    permissions.initPropertiesFromJson(data);
    if (permissions.has(SP.PermissionKind.viewListItems)){
       console.log(String.format('User can access {0} list',listTitle));    
    }
})
.fail(function(error){
    console.log(JSON.stringify(error));
});

---

C# version

Since getusereffectivepermissions method returns Microsoft.SharePoint.Client.BasePermissions object that consists of the following properties :

• High - Specifies the most-significant 32 bits of the BasePermissions uint
• Low - Specifies the least-significant 32 bits of the BasePermissions uint

the following classes have been introduced:

• BasePermissions.cs - contains the method to check permissions
• PermissionKind.cs - represent the permission levels

Having said that, below is provided the C# example that demonstrates how to determine user permissions:

using (var client = new SPHttpClient(webUri, userName, password))
{
     string endpointUrl = webUri + "/_api/web/lists/getbytitle('" + listTitle + "')/getusereffectivepermissions(@u)?@u='" + Uri.EscapeDataString(accountName) + "'";
     var data = client.GetJson(endpointUrl);
     var permissions = BasePermissions.ParseFromJson(data);
     if (permissions.Has(PermissionKind.ViewListItems)){
                Console.WriteLine("User {0} can access {1} list",accountName,listTitle);    
     }
 }

where SPHttpClient class is a Http client for SharePoint Online , follow Consume SharePoint Online REST service using .NET article for a details.