In sharepoint 2010/2013, I know REST api is automatically security trimmed, but is the JSOM (javascript object model) also security trimmed?

2 Answers 2


Yes, they are both security trimmed, there is no impersonation or elevation of privilege available in these APIs.


JSOM (and REST API) runs in the context of the user querying the endpoint or execute the code on the client side. Therefore it is security trimmed.

  • typo, it should be JSOM*
    – omega
    Oct 20, 2016 at 21:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.