I have a simple SharePoint-hosted app which wants to create an item in a list in its app web. (Explicitly not in the host web.) That's all.
If my understanding is correct, no special app permissions should be necessary to write to the app web as the app has full control. But it fails.
The app can only create the list item if the current user has also write permissions on the list. So if the user can go to the app web list and create an item, the app can. If the user can't create such an item, the app can't.
My expectation is that the app should always be able to create such an item, regardless of the permissions of the current user.
For completeness this the relevant part of my
<AppPrincipal> <Internal /> </AppPrincipal> <AppPermissionRequests> </AppPermissionRequests>
Nothing to see here. And this is how I get my client context:
context = SP.ClientContext.get_current();
Where is the error in my thinking?