In our project, users will allow to upload the document only through the app and will have also provided links in apps to directly download the file

e.g :


But they can't directly upload any document through below URL


I have set the custom permission level in which the following roles are unchecked

  • View Application Pages( View forms, views and application pages,Enumerated lists)

In this way, I can stop user to directly to go ALLitems.aspx page, but he can't download the document by the above-mentioned link.

How can achieve this security in a better way?

  • Using SPD using All Files navigation delete those aspx pages from the Forms folder. – Amal Hashim Jul 23 '16 at 16:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.