In our project, users will allow to upload the document only through the app and will have also provided links in apps to directly download the file

e.g :


But they can't directly upload any document through below URL


I have set the custom permission level in which the following roles are unchecked

  • View Application Pages( View forms, views and application pages,Enumerated lists)

In this way, I can stop user to directly to go ALLitems.aspx page, but he can't download the document by the above-mentioned link.

How can achieve this security in a better way?

  • Using SPD using All Files navigation delete those aspx pages from the Forms folder. Jul 23, 2016 at 16:52


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.