Hi,
As far I understand it, if I give read access to a table (Table Permission), I can use that read access to list records for that table in Portals, for example.
My questions is: Is it possible for a user to access that table data beyond the list I provided and if so, how?
I ask this because the WebAPI can be accessed via "/_api/contacts?$select=fullname", for instance, and it respects the Table Permission for that table, however it is limited to the fields selected when enabling the API.
For my scenario, I want to give Table Permission to a definitions table so I can consult it via Liquid/FetchXML and retrieve a value, but the logged on user should not have access to any other fields from that table.
