Sharepoint 2013 App development using JSOM

Question

I'm developing an SP2013 App using JSOM and have a few questions which I'm struggling to get answered:

1. I am deploying a list on which I want to have very granular control; users of the app should only have read access and admin users should be able to have full control...as far as I can see there is now way to set these permissions?

2. On a similar note I have content on the page which I want only Admin user to be able to see but I can see no way to add audience targeting via code? Is this possible?

Any pointers would be appreciated.

Answer 1

Create a list of users with full control;

Search this list, using JQuery, checking if the user is logged in it;

Now you know whether or not it has Full Control permission. Use this code to get current user:

SP.SOD.executeFunc('sp.js', 'SP.ClientContext', sharePointReady);
var User;
var UserID;
var Context;
function sharePointReady() {
    Context = SP.ClientContext.get_current();
    User = Context.get_web().get_currentUser();
    Context.load(User);

    Context.executeQueryAsync(function(){
        UserID = User.get_id();     
    }, function(){
        console.log('error');       
    })
}

Answer 2

I would suggest setting sharepoint permissions on the list at the point of deployment (assuming you mean WSP).

You could have a "deployment" page which configures these permissions. Or if you need to control permissions yourself through JS, you could get the list of users and groups through SPWeb.SiteGroups and SPWeb.SiteUsers.

You can use SPWeb.SiteGroups Collection to get the list of groups for a site. Then you can use SPList.RoleAssignments to give specific permissions (and break inheritance).

Here's an example using C#, however it could be applied to JSOM.

As for audience targetting, you could use a Content Editor Web Part and put your page content inside. CEWP have an Audience targetting property.