How to achieve row level security in power apps portal

(0) Share

Report

Posted on by praneshJ

121

Hello,

I want to achieve row-level security in my power apps portal application. I have 4 users, from which 3 of then are associated with one site each. and I have one superuser named Alex, mentioned in the below screenshot, who has the access to all the sites

please check the below screenshot.

When John logs in to the portal using his credentials, he should see only Site Lily details,
Mike logs in to the portal using his credentials, he should see only Site Rose details,

but when Alex logs in to the portal he must see all three sites Lily, Rose, Lotus

How do I achieve this in the power apps portal?

Any kind of quick help is really appreciated!!

Regards,

Pranesh

All responses (6)

Answers (0)

justinburch Microsoft Employee on at

Like (1)

Report
Re: How to achieve row level security in power apps portal

Thanks @praneshJ, I had a feeling this was the case. With this knowledge, I believe your issue is in your Entity Permissions. As I don't know the relationships, I'm making some assumptions with this proposed set of Web Roles & Permissions:
Superuser Web Role
Site Activity Entity Permission
Global Read, Append, Append To
Site Entity Permission
Global Read, Append, Append To
Standard Web Role
Site Activity Entity Permission
Contact-Based
On Relationship: Contact lookup on Site Activity
Read, Write, Append, Append To, Create
Site Entity Permission
Parent-Based
On Relationship: Site Lookup on Site Activity
Read, Append, Append To
praneshJ 121 on at

Like (0)

Report

Re: How to achieve row level security in power apps portal

Hi @justinburch,

Thanks for the reply,
yes, it's correct as you mentioned, but the create form opens for creating a new record for 'site activity', and the site is a lookup field,
as shown in the image below,
and that site lookup field is not getting filtered according to the logged-in user.
when John, Mike, and Smith logs in to the portal application, they should see the only site associated with them.
and when Alex logs in, He should see the all sites.

Please let me know if I am able to clarify your doubt.

Please comment on this.
justinburch Microsoft Employee on at

Like (0)

Report

Re: How to achieve row level security in power apps portal

Hi @praneshJ,
I'm going to paraphrase, please let me know if anything here is wrong:
You have a view showing All Site records. With proper Entity Permissions, this list correctly only shows Site records where the logged in user is associated to the Site - in your example, John, Mike and Smith each see one Site, Alex (Global Read) sees all. When John, Mike, or Smith click the Create button, you open a Create entity form to create a new Site record, and this record has a self-referential lookup to a Site record, but this lookup allows each to see more than their own Site.
Is this correct?
oliver.rodrigues 9,342 Most Valuable Professional on at

Like (0)

Report

Re: How to achieve row level security in power apps portal

take a look at this article: https://www.dancingwithcrm.com/custom-lookup-filtering-powerapps-portal/
you need a bit of code but it is straight forward enough

------------
If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.
praneshJ 121 on at

Like (0)

Report

Re: How to achieve row level security in power apps portal

I have achieved row-level security in the entity list on the web page,
I have the site column in my entity list and that is getting filtered correctly based on the logged-in user. I have enabled Create functionality with the entity list, and when I click on the create button, it opens ups the create form, in that form, there is a site lookup field, but it is not getting filtered as the logged-in user instead, it showing all the sites in the lookup field, irrespective of the user logged in.
I need to filter that site lookup field on the Create form as well,

what is the best possible way to achieve it?

Quick help is really appreciated!
oliver.rodrigues 9,342 Most Valuable Professional on at

Like (1)

Report

Re: How to achieve row level security in power apps portal

Hi

I think actually that might be easier than it looks, have you looked into Entity Permissions?: https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/assign-entity-permissions

the only trick here is that you will need to create two entity permissions for the same entity, but linked to a different Contact relationship (I am assuming users / super user are two different lookup to the Contact entity)
when having multiple permissions, the Portals should combine and give the show all results

------------
If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.