web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

News and Announcements icon
Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Apps / Restrict OData() call ...
Power Apps
Unanswered

Restrict OData() call being accessible via javascript by any logged-In user

(0) ShareShare
ReportReport
Posted on by 7

We have a Powerapps Portal app to serve chemical industry level operations for multiple Chemical industries Employees.
However any Logged-In user able to access API call by simply inspect element -> Source via JavaScript and some URL operations.

Let me know how we can restrict API call so that no one can read other industry user data via javascript and URL operations.
Its an security issue.

Till now we have tried by implemented Ajax Web API call but now as per Portal update anyone can add portal url prefix to generated API URL from debugging javascript.

Appreciate quick response as its an High Priority.   

Categories:
I have the same question (0)

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Season of Sharing Community Challenge Winners!

Congratulations to our community stars!

Kudos to our 2025 Community Spotlight Honorees

Expanding mentorship, skilling, and AI innovation

Congratulations to the July Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Power Apps

#1
WarrenBelz Profile Picture

WarrenBelz 427 Most Valuable Professional

#2
11manish Profile Picture

11manish 201 Super User 2026 Season 2

#3
MS.Ragavendar Profile Picture

MS.Ragavendar 128 Super User 2026 Season 2

Last 30 days Overall leaderboard