Datasourceinfo doesnt work

[Delid4ve]

Trying to hide a gallery based on delete permissions.

Ive shared the app with a user and restricted permissions in sharepoint so the only way the user can edit the list is through the app.

When using (Datasourceinfo(tablename,DeletePermission) it always evaluates to true.  Yet the user does not have the delete permission available.

I have also removed edit permission (as i know windows deletes and recreates on edit) and thought sharepoint may be the same, however this still does not work so im guessing there is a bug.

In sharepoint 

List Permissions

Add items

Edit Items

View Items

Open Items

View Versions

Site Permissions

Browse Directories

View Pages

Enumerate Permissions

Browse User information

Use Remote Interfaces

Use Client Integration Features

Open

Personal Permissions

none

[v-yamao-msft]

Hi Delid4ve,

So you are working with SharePoint list. What’s the permission level you specified for shared users for the list?

And what’s the permission you set for the shared users when sharing the app?

It seems that I am getting the same results with you.

I will help confirm with this issue on my side and back to you once I got any updates.

Best regards,
Mabel Mao

[Meneghino]

I can confirm the same problem.

My user does not have delete permission on a document library, but

DataSourceInfo(Documents, DataSourceInfo.DeletePermission)

evaluates to true.

@v-yamao-msftplease escalate without delay.

[Johnathon_S]

I have the same issue in SharePoint list. DataSourceInfo always returns true no matter what the permission. 

[v-yamao-msft]

Hi All,

I have some updates for you.

The SharePoint connection (being an OAuth connection) is created per-user and executes with the permissions of the end user. So if the SharePoint list permissions were restricted for the end users then it makes sense that the end user wouldn’t have the delete permission. The user permissions are what matters; the app doesn’t have any special permissions and OAuth connections aren’t shared (whereas SQL connections and non-OAuth custom connector connections are shared).

Best regards,
Mabel Mao

[Johnathon_S]

Then you aren't able to show/hide/disable buttons or content based on permissions if you use SharePoint? That's a lot of user experience just gone. 

[Grahambo05]

@v-yamao-msft any update on this?

[skylitedave]

I see the same issue with DataSourceInfo connected to SharePoint lists and dont follow the response given about the OAuth connection.  If the connected user using a unique connection to a SharePoint list does not have permissions specified in SharePoint for that connection to that list, then the DataSourceInfo should return the proper response.  

We could really use this capability for wads and wads of functionality in the apps connected to SharePoint lists and right now, it does not work at all.... I can confirm the function always returns true no matter what permissions the connected user has been granted to that list using that connection.  It is a bug and not the desired/required functionality we need.

[larivibi]

Please @v-yamao-msft , can you confirm that you are still investigating the matter

[Martine]

I have the same issue.  Any solution?

Thanks,

Martine.