cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
scotthanks
Advocate II
Advocate II

Prevent people from connecting an app to a SharePoint list

I've created some PowerApps apps for SharePoint lists because I needed to provide custom forms and control what information is provided to and can be changed by users.  Is there any way prevent users from simply creating their own app and connecting it to my list to bypass whatever customizations and restrictions I put in my app?

18 REPLIES 18
sarafankit
Power Apps
Power Apps

Hi @scotthanks,

 

No, there is no way to prevent people from creating an app that connects to a SharePoint list if they have write/read access to the list.

 

I think this is also not the right way to think about this problem. Even if you could prevent them from creating an app, they can always go directly to the list and then bypass your customizations. The only way to secure your list is to ensure that you put restrictions in the SharePoint list itself.

Thanks for your reply, @sarafankit.  Actually, I can prevent users from going directly to the list and viewing or editing items that way.  I found the right combination of permissions that allows users to add, edit, and delete items in the list in PowerApps but prevents them from accessing the list directly through the site.  If they try to browse to the list or click on a direct link to the list, they get the "access denied" page.

 

In trying to control what users can do in a list, your only options in SharePoint are to allow users to read and/or edit all items, allow users to read and/or edit only items they created, or set up unique permissions on each item.  These options are probably sufficient in most scenarios, but definitely not all.  Plus, you can't apply permissions to specific columns in the list.  PowerApps gives you that extra level of control that's simply not available in SharePoint alone.  Unfortunately, PowerApps also makes it very easy for someone with only basic permissions to the list to create their own app and bypass the restrictions you built into the "official" app for that list.

 

There really needs to be some way for site owners to control who can add a connection to their SharePoint lists in PowerApps.  Ideally, a unique permission specifically for this might be nice, but even simply requiring at least the Design permission level would work, too.

Anonymous
Not applicable

You could make controls visible or hidden based on the user (which you previously queried from a list and put in a variable), this is how I do this in my screens... And in the gallery or new/display forms, hide controls based on these 🙂

Thank you, @Anonymous, for responding.  Unfortunately, that doesn't answer my question about how to prevent someone from connecting their own app to my SharePoint list.

Anonymous
Not applicable

@scotthanks I somewhere lost that sentance when reading you question.

 

In fact thats a really good question, wouldn't know the answer to it but I'm also curious about this one!!

What permissions did you give to "allows users to add, edit, and delete items in the list in PowerApps but prevents them from accessing the list directly through the site."? Thank you!

Hi, @S_Harvey.  I created a couple of custom permission levels.  For lists where users need to add and edit items in PowerApps, I gave these permissions: Add Items, Edit Items, View Items, View Versions, Delete Versions, View Pages, Browse User Information, and Open.

 

For lists where users only needed to read items in PowerApps, I gave these permissions:  View Items, View Pages, Browse User Information, and Open.

 

It's also necessary to activate the "Limited-access user permission lockdown mode" site collection feature for this to work.

pepeday
Helper I
Helper I

I've read through but I still don't understand if anyone has managed to do what OP is asking. Taking it one step further:

 

How can I create a PowerApp connected to ListA, that grants the users the permission to read/write/delete list items through the PowerApp, but block direct access to ListA itself?

 

Hope someone can clarify.

pepeday
Helper I
Helper I

This is a question I also have but as far as I've searched, this doesn't seem possible.

Helpful resources

Announcements

Power Platform Connections - Episode 7 | March 30, 2023

Episode Seven of Power Platform Connections sees David Warner and Hugo Bernier talk to Dian Taylor, alongside the latest news, product reviews, and community blogs.     Use the hashtag #PowerPlatformConnects on social media for a chance to have your work featured on the show.     

Announcing | Super Users - 2023 Season 1

Super Users – 2023 Season 1    We are excited to kick off the Power Users Super User Program for 2023 - Season 1.  The Power Platform Super Users have done an amazing job in keeping the Power Platform communities helpful, accurate and responsive. We would like to send these amazing folks a big THANK YOU for their efforts.      Super User Season 1 | Contributions July 1, 2022 – December 31, 2022  Super User Season 2 | Contributions January 1, 2023 – June 30, 2023    Curious what a Super User is? Super Users are especially active community members who are eager to help others with their community questions. There are 2 Super User seasons in a year, and we monitor the community for new potential Super Users at the end of each season. Super Users are recognized in the community with both a rank name and icon next to their username, and a seasonal badge on their profile.    Power Apps  Power Automate  Power Virtual Agents  Power Pages  Pstork1*  Pstork1*  Pstork1*  OliverRodrigues  BCBuizer  Expiscornovus*  Expiscornovus*  ragavanrajan  AhmedSalih  grantjenkins  renatoromao    Mira_Ghaly*  Mira_Ghaly*      Sundeep_Malik*  Sundeep_Malik*      SudeepGhatakNZ*  SudeepGhatakNZ*      StretchFredrik*  StretchFredrik*      365-Assist*  365-Assist*      cha_cha  ekarim2020      timl  Hardesh15      iAm_ManCat  annajhaveri      SebS  Rhiassuring      LaurensM  abm      TheRobRush  Ankesh_49      WiZey  lbendlin      Nogueira1306  Kaif_Siddique      victorcp  RobElliott      dpoggemann  srduval      SBax  CFernandes      Roverandom  schwibach      Akser  CraigStewart      PowerRanger  MichaelAnnis      subsguts  David_MA      EricRegnier  edgonzales      zmansuri  GeorgiosG      ChrisPiasecki  ryule      AmDev  fchopo      phipps0218  tom_riha      theapurva  takolota     Akash17  momlo     BCLS776  Shuvam-rpa     rampprakash  ScottShearer     Rusk  ChristianAbata     cchannon  Koen5     a33ik   Heartholme     AaronKnox        Matren        Alex_10        Jeff_Thorpe        poweractivate        Ramole        DianaBirkelbach        DavidZoon        AJ_Z        PriyankaGeethik        BrianS        StalinPonnusamy        HamidBee        CNT        Anonymous_Hippo        Anchov        KeithAtherton        alaabitar        Tolu_Victor        KRider        sperry1625        IPC_ahaas      zuurg    rubin_boer   cwebb365   Dorrinda   G1124   Gabibalaban   Manan-Malhotra   jcfDaniel   WarrenBelz   Waegemma      If an * is at the end of a user's name this means they are a Multi Super User, in more than one community. Please note this is not the final list, as we are pending a few acceptances.  Once they are received the list will be updated. 

Microsoft Power Platform Conference | Registration Open | Oct. 3-5 2023

We are so excited to see you for the Microsoft Power Platform Conference in Las Vegas October 3-5 2023! But first, let's take a look back at some fun moments and the best community in tech from MPPC 2022 in Orlando, Florida.   Featuring guest speakers such as Charles Lamanna, Heather Cook, Julie Strauss, Nirav Shah, Ryan Cunningham, Sangya Singh, Stephen Siciliano, Hugo Bernier and many more.   Register today: https://www.powerplatformconf.com/   

Check out the new Power Platform Communities Front Door Experience!

We are excited to share the ‘Power Platform Communities Front Door’ experience with you!   Front Door brings together content from all the Power Platform communities into a single place for our community members, customers and low-code, no-code enthusiasts to learn, share and engage with peers, advocates, community program managers and our product team members. There are a host of features and new capabilities now available on Power Platform Communities Front Door to make content more discoverable for all power product community users which includes ForumsUser GroupsEventsCommunity highlightsCommunity by numbersLinks to all communities Users can see top discussions from across all the Power Platform communities and easily navigate to the latest or trending posts for further interaction. Additionally, they can filter to individual products as well.       Users can filter and browse the user group events from all power platform products with feature parity to existing community user group experience and added filtering capabilities.     Users can now explore user groups on the Power Platform Front Door landing page with capability to view all products in Power Platform.    Explore Power Platform Communities Front Door today. Visit Power Platform Community Front door to easily navigate to the different product communities, view a roll up of user groups, events and forums.

Welcome to the Power Apps Community

Welcome! Congratulations on joining the Microsoft Power Apps community! You are now a part of a vibrant group of peers and industry experts who are here to network, share knowledge, and even have a little fun! Now that you are a member, you can enjoy the following resources:   The Microsoft Power Apps Community Forums If you are looking for support with any part of Microsoft Power Apps, our forums are the place to go. They are titled "Get Help with Microsoft Power Apps " and there you will find thousands of technical professionals with years of experience who are ready and eager to answer your questions. You now have the ability to post, reply and give "kudos" on the Power Apps community forums! Make sure you conduct a quick search before creating a new post because your question may have already been asked and answered!   Microsoft Power Apps IdeasDo you have an idea to improve the Microsoft Power Apps experience, or a feature request for future product updates? Then the "Power Apps Ideas" section is where you can contribute your suggestions and vote for ideas posted by other community members. We constantly look to the most voted Ideas when planning updates, so your suggestions and votes will always make a difference.   Community Blog & NewsOver the years, more than 600 Power Apps Community Blog Articles have been written and published by our thriving community. Our community members have learned some excellent tips and have keen insights on building Power Apps. On the Power Apps Community Blog, read the latest Power Apps related posts from our community blog authors around the world. Let us know if you would like to become an author and contribute your own writing — everything Power Apps related is welcome!   Power Apps Samples, Learning and Videos GalleriesOur galleries have a little bit of everything to do with Power Apps. Our galleries are great for finding inspiration for your next app or component. You can view, comment and kudo the apps and component gallery to see what others have created! Or share Power Apps that you have created with other Power Apps enthusiasts. Along with all of that awesome content, there is the Power Apps Community Video & MBAS gallery where you can watch tutorials and demos by Microsoft staff, partners, and community gurus in our community video gallery.   Again, we are excited to welcome you to the Microsoft Power Apps community family! Whether you are brand new to the world of process automation or you are a seasoned Power Apps veteran. Our goal is to shape the community to be your ‘go to’ for support, networking, education, inspiration and encouragement as we enjoy this adventure together!   Let us know in the Community Feedback if you have any questions or comments about your community experience.To learn more about the community and your account be sure to visit our Community Support Area boards to learn more! We look forward to seeing you in the Power Apps Community!The Power Apps Team

Top Solution Authors
Top Kudoed Authors
Users online (4,518)