Answered

Table permissions not working as expected

(0) Share

Report

Posted on by MJWhite

338

I have set up authentication of Power Pages site with Azure AD B2C, configured the site as directed and everything seems to be working apart from one significant issue. I'm wondering if anyone can spot where I've made a mistake. Here are the steps:

I have a Test User contact with a web role of Job Profile Users:

I have a Test Data Manager contact with a web role of Job Profile Managers:

Both contacts are registered with Azure AD B2C and I am able to sign into the site with their credentials:

I have assigned permissions to the Job Requirement Framework table so the Job Profile Data Managers can Read, Write, Create and Delete, but the Job Profile Users can just Read

Those permissions are displayed on a List:

If I don't sign in, I can't see any records on the list, as expected:

I then sign in as Test User:

I would hope to be only able to Read the list (as Test User), but I can Create, Edit and Delete:

Changes to data are being saved, even though I shouldn't have the permissions to Edit.

Any thoughts? Have I missed an essential step?

Categories:

Security

I have the same question (0)

All responses (6)

Answers (1)

Sort by

Haritha222 14 on at

Like (0)

Report
Copy link

Link copied!

Hi,

Try to change table permission job requirement framework user access to contact and try once

Was this reply helpful? Yes No
MJWhite 338 on at

Like (0)

Report
Copy link

Link copied!

Hi Hari123
Thanks for the reply, but I don't understand the suggestion.
The problem isn't that Test User is viewing too many records. I want Test User to view all records and that is why the Access is set to Global.
The problem is that Test User can create, edit and delete records, when I would expect them to only view records.
Hence, I can't see how changing the permission access to Contact instead of Global will solve the problem. Plus, it will give me another problem of not viewing all the records?

Was this reply helpful? Yes No
Haritha222 14 on at

Like (0)

Report
Copy link

Link copied!

Hi,
Account wise anything data maintaing.

Was this reply helpful? Yes No
MJWhite 338 on at

Like (0)

Report
Copy link

Link copied!

Hi
I don't understand your reply and I don't think many other readers will understand it either.
If you can't post with clear descriptions and reasoned explanations, it is better not to post at all.

Was this reply helpful? Yes No
Verified answer

Fubar 8,487 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

After making any changes make sure you sync'd the Portal and also logged out from the Portal.

Look at the Check boxes on the Web Role (from Portal Management App). If you are directly assigning Web Roles to Contacts the Authenticated and Anonymous Checkboxes should be unchecked.
The Checkboxes indicate the Web Role's Table Permissions can be Inherited by all Portal Users when they are signed in and the other for someone not signed in (the Web Role does not show against the Portal Users but they get the Permissions). Also, if using Inheritance then only 1 Web Role with a checkbox ticked should be present (e.g. if there are 2 Web Roles with Anonymous ticked you Portal User will inherit from only 1 of them - and the system will choose which one), also double check the out of the box Web Roles.

Was this reply helpful? Yes No
MJWhite 338 on at

Like (1)

Report
Copy link

Link copied!

Thanks Fubar
That's solved it.
The relevant part of Configure web roles in Power Pages | Microsoft Learn which I failed to read properly is shown in the screenshot below.
Much appreciated.

Was this reply helpful? Yes No