App security and attachments

(0) Share

Report

Posted on by legion1202

Hey Power App community!

I have two questions that I am trying to sort out with my app.

How do people deal with app and share point security.. I have two groups of people and they will be called Field Group and Office Group. The office group will have access to the back end share point list but I dont want the field users to be able to touch it.

I also want office group to be able to see everything in the app but only want the field guys to see only data that they are working on. This info included a form and a gallery. How do you power app experts handle this... From what I am ready there is a few ways to do it.. I just need something simple and not over complex.

The second part of my question is dealing with attachments. Is there a way to upload an attachment right to a document library from an APP? Or do I need to use a flow... Is there a way we can specially have templates renamed ?

Thanks,

Categories:

Building Power Apps

All responses (4)

Answers (0)

Sort by

Pstork1 69,661 Most Valuable Professional on at

Like
a
(0)

Report
Copy link

Link copied!

Without getting into a lot of messy calls to change individual permissions, the answer is to look for a different tool. Power Apps will require that users have whatever access they need to data in Power Apps in the SharePoint list also. There is no way to use Power Apps as an actual security layer. User's will need access to the backend.
legion1202 36 on at

Like
a
(0)

Report
Copy link

Link copied!

Would SQL be a better option for a data source then? We are using SP just because it was easier for us to test. I`m also puzzled on licensing CDS or SQL. Do all my power app users need a premium license or is just the author of the app required to have it?
Pstork1 69,661 Most Valuable Professional on at

Like
a
(0)

Report
Copy link

Link copied!

Anyone running an app that uses SQL or CDS will require premium licensing. But even moving to SQL or CDS won't change things that much. Users still need access rights in the Data Source. The only difference is that unlike SharePoint its not as easy to get at the data. But if they decide to build their own Power App, which you won't be able to prevent, then they would have access to the data. Power Apps just isn't designed to provide a security layer for the backend data. It just uses whatever permissions are already there.
legion1202 36 on at

Like
a
(0)

Report
Copy link

Link copied!

Thanks!