Get if user has permissions to access to a Cloud App for Sharepoint 2013 with JavaScript CSOM or Rest Api

Question

I have developed a Cloud App for SharePoint 2013 on an office 365 server, and I figured out that to set the user permissions(who has access to it) for that app can be find over https://sharepoindomain/sites/mysitecollection/MyAppName/_layouts/15/user.aspx

In there I can see and manage the user permissions access and stuff like edit and read and everything exclusively for my app.

So if I see that in there i thought there was a way to get them through the Rest API or JavaScript CSOM so I started looking on https://sharepoindomain/sites/mysitecollection/MyAppName/_api/web and then I found a method named SiteUserInfoList

I accessed to it like this: https://sharepoindomain/sites/mysitecollection/MyAppName/_api/web/SiteUserInfoList/items

And it seems to mee that this was the right area for getting the user permissions for that app but I don't know if I'm correct because when I added a user, and after that I deleted it , it still shows the deleted user on the SiteUserInfoList/items, I noticed that every user has a Property Called Deleted which is boolean but even if its added or deleted, the user still shows when the Deleted Property as False.

So that's why I have double thoughts about this and I don't know if I'm in the wrong way.

I basically want this to show or hide a link in some page over the https://sharepointdomain/sites/mysitecollection/ according to if the current user has permission to properly access to that sharepoint app

is it possible?

Thank you so much for your help

Answer 1

The Site User Info list is cached. So yes you can use it, but no it won't be up to date all the time.

You are better off using the User and Groups part of the REST api for this.

MSDN: http://msdn.microsoft.com/en-us/library/office/dn531432.aspx

Direct link to the cheat sheet from MSDN: http://zoom.it/OLUf#full

The correct way is to check if the user has access to the correct group to show the link. The links then show the permissions.

Alternatively if you don't want to use this method you can use

Web/DoesUserHavePermissions

The results can be compared to the enum SP.PermissionKind.

Both ways are valid, groups is the proper way as it is easier to manage.

Answer 2

You should use CSOM for this. You can use a combination of RoleAssignment and RoleDefinition to assign the proper permissions for the proper users.

function example22() {
    var ctx = new SP.ClientContext.get_current();
    this.oWeb = ctx.get_web();
    this.oUser = oWeb.get_currentUser();
    this.oRoleDef =
    this.oWeb.get_roleDefinitions().getByName(“Restricted read-only access”);
    var roleDefinitionBindingColl =
    SP.RoleDefinitionBindingCollection.newObject(ctx);
    roleDefinitionBindingColl.add(this.oRoleDef);
    var oRoleAssignment = this.oWeb.get_roleAssignments().add(
    this.oUser, roleDefinitionBindingColl);
    ctx.load(this.oUser, “Title”);
    ctx.load(this.oRoleDef, “Name”);
    ctx.executeQueryAsync(
    Function.createDelegate(this, this.onSucceededCallback),
    Function.createDelegate(this, this.onFailedCallback));
    }
    function onSucceededCallback(sender, args) {
    alert(“User ‘” + this.oUser.get_title() + “‘ assigned to role ‘” +
    this.oRoleDef.get_name() + “‘.”);
}

Googling RoleDefinition or RoleDefinitionBindingCollection gives your alot of boilerplate code. The pasted code example was taken from this blog: http://go4idm.blogspot.dk/2011/01/accessing-users-and-roles.html

Answer 3

i had to do something similar in a cloud app very recently and used the following code to show and hide a menu which only Admin can see.

context.load(web, 'EffectiveBasePermissions');
context.executeQueryAsync(onQuerySucceeded, onQueryFailed);

function onQuerySucceeded(sender, args) {
    // Success returned from executeQueryAsync
    userName = web.get_currentUser();
    userName.retrieve();


    if (web.get_effectiveBasePermissions().has(SP.PermissionKind.manageWeb)) {
        hideAllPanels();
        $('#adminMenu').fadeIn(500, null);

    }
    else {

        $('#adminMenu').hide();
    }


}
function onQueryFailed(sender, args) {
    // Failure returned from executeQueryAsync
    var divMessage = document.createElement("DIV");
    divMessage.setAttribute("style", "padding:5px;");
    divMessage.appendChild(document.createTextNode("Failed to get started. Error: " + args.get_message()));
    errArea.appendChild(divMessage);
}