I have created a web-part page containing a web-part that reads, updates and deletes items from lists and libraries. I have created a group and linked it to a custom permission level that has the following permissions:
- Add Items
- Edit Items
- Delete Items
- View Items
- View Application Pages
- View Pages
I have then added a generic user account to this group. The idea is that anyone using this account can use the web-part page to access/manage the information. This works as designed.
The problem however, is that the user could just as well access Site Contents, or SomeList/AllItems.aspx, SomeLibrary/AllItems.aspx and manipulate the information without having to use the web-part. I would like to restrict this access.
So are there ways by which I could allow a web-part to access/manipulate the underlying lists and libraries but restrict the user using the web-part from doing so as well as from accessing the Site Contents?
Thank you in advance.