ckeck if special user has access to a document in SPO

(0) Share

Report

Posted on by iw

hi to all,
i have a flow triggered from a powerapp and a user email address comes from the app.

In the flow i try to check if the user (from email address) has access to a special document in a document library.

If not the flow should not give back the content of the document.

How can i do the access check?

regards

Categories:

Building flows

I have the same question (0)

All responses (3)

Answers (1)

Verified answer

abm abm 32,865 Most Valuable Professional on at

Like (0)

Report

Hi @iw

Use the REST API method HTTP Get method getusereffectivepermissions(@user)?@user='<user login name>' to determine user permissions.

https://docs.microsoft.com/en-us/previous-versions/office/developer/sharepoint-rest-reference/dn531433%28v%3doffice.15%29

Look section GetUserEffectivePermissions method

If this reply has answered your question or solved your issue, please mark this question as answered. Answered questions helps users in the future who may have the same issue or question quickly find a resolution via search. If you liked my response, please consider giving it a thumbs up.

Thanks

Was this reply helpful? Yes No
RezaDorrani 12,143 on at

Like (0)

Report

Hi @iw

Since your PowerApp is calling Flow it will do so in the context of the current logged in user

If you try and query that special document library item for the current user it will either return no results or exception

For no results you can check the length of the result set, if 0 then user does not have access
If exception for file not found =, you can configure run after step and return empty content

Regards,
Reza Dorrani

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly

Was this reply helpful? Yes No
iw 4 on at

Like (0)

Report

thank you for your Feedback.

is this the right way?

_api/web/GetFileByServerRelativeUrl('/Folder Name/file name')/$value/getusereffectivepermissions(@user)?@user='loggedInUser'

Was this reply helpful? Yes No