I am updating a list MasterData programmatically using data which a user has entered in a small custom application. Application uses credentials entered by the user to login to Sharepoint, through Client COM.

If the user tries to open the list directly from their browser -


they are able to view it.

I would like to restrict this so that they cannot view the list at all from their browser. But application should still be able to use their login details to enter the data. How can this be done? Thanks in advance!


To accomplish it you can break the permissions on the list so users can't access it and since there is no way to elevate the privileges using the client object model because it would be a severe security breach you can just create your own custom web service\WCF service and update the list on server side using SPSecurity.RunWithElevatedPrivileges method. Here's a nice tutorial on how to create a custom WCF service.

| improve this answer | |
  • Thanks for the link Alex. But I'm not sure if I would have permissions to create a service on the server. I will try and update back here. Is there any other way? – xcentaur May 29 '13 at 3:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.