Power Platform Community Forum Thread Details

How to hide a field on a form based on a specific web role?

I'm currently creating a form on Power Pages for a scholarship application.

The biz wants to be able to have admin rights to a portal to see all submissions under this active submissions page

The permissions are currently setup so that only administrator web roles can view this page.

On the last column to the right is a section for internal comments. The purpose is so administrators can go in and review submissions and put comments on submission ratings.

I currently have 2 pages, a form page and a admission view page.

1. I want to be able to hide the Internal Comments field in the form page that's available to external users, without the data being potentially leaked without breaking through our security settings (Read that hiding a field still allows it to be accesed via code). Additionally,

2. On the admission view page, I want to be able to use the edit function in the list to be able to add internal comments (it would be better if we could just edit directly on the table) without needing to clear all data after clicking Edit.

All columns are setup in one table.

Categories:

Security

Hi, a few points here to make:

Perhaps you will go at a later stage through an UI/UX exercise, but basically those colours are probably not helping the Portal design, I suggest reviewing
The quantity of columns in the view/list also doesn't feel right to me, a list has to be a summary of the record so user can view quickly the most relevant information. Long texts are not recommended to be displayed in a list component.
If you are using authenticated using, I personally find Captcha a bit overkill, but ultimately that's up to you and your organisation security policies
When you say about the business wanting admin access to the portal to manage data, are these internal users? In my view, internal users should use the back-end Model Driven App, and not the Portal. The main benefits of the Portal is to bring your Dataverse/D365 data to external users.
- I am not saying you can't use for internal users, it's just not the most common use case
To secure properly the data, you should have 2 separate Forms / Web Pages / etc. Each page must have Page Access Control defined so you can protected the page for each web role.
- Alternatively you can use JS to hide the field, but like you said, users can use dev techniques to get access to that
For the comment functionality, you can look at Portal Comments or Notes or Timeline to achieve this

Quick Links

Subscribe to this forum!