Solved

Checking the security group for the current user in SharepointPoint 2007 using Javascript/jquery and web services

Posted on 2011-02-11
6
695 Views
Last Modified: 2012-08-14
I am trying to add field level security to the view form of a sharepoint list.  I only want all fields to show if the user is the member of a specific group.  I need to make a web service call using javascript/ jquery that gets the security groups for the current user then compare them to a specific group.  
0
Comment
Question by:jasonshifflett
  • 2
  • 2
6 Comments
 
LVL 51

Accepted Solution

by:
tedbilly earned 500 total points
ID: 34876838
If you are applying security to data on the client (in JavaScript) it's too late because the user has access to the data.

Let Sharepoint do all the work.  Your query should be asking Sharepoint for the data and Sharepoint will apply permissions before returning the results based on the user accessing the page.

Security in a web application should never be applied on the client.
0
 

Author Comment

by:jasonshifflett
ID: 35057188
In this instance I am trying to hide specific columns if the user is not part of a specific group.  I just ended up using the web service to pull permission for the current user then did a string search for the specific user group I was looking for
0
 

Author Comment

by:jasonshifflett
ID: 35057240
....
0
 
LVL 51

Expert Comment

by:tedbilly
ID: 35059704
Comment http:#34876838 is correct.  Security applied on the client can be changed.
0
 
LVL 1

Expert Comment

by:Vee_Mod
ID: 35120683
All,
 
Following an 'Objection' by tedbilly (at http://www.experts-exchange.com/Q_26868924.html) to the intended closure of this question, it has been reviewed by at least one Moderator and is being closed as recommended by the Expert.
 
At this point I am going to re-start the auto-close procedure.
 
Thank you,
 
Vee_Mod
Community Support Moderator
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

JavaScript can be used in a browser to change parts of a webpage dynamically. It begins with the following pattern: If condition W is true, do thing X to target Y after event Z. Below are some tips and tricks to help you get started with JavaScript …
International Data Corporation (IDC) prognosticates that before the current the year gets over disbursing on IT framework products to be sent in cloud environs will be $37.1B.
The viewer will learn the basics of jQuery, including how to invoke it on a web page. Reference your jQuery libraries: (CODE) Include your new external js/jQuery file: (CODE) Write your first lines of code to setup your site for jQuery.: (CODE)
The viewer will learn the basics of jQuery including how to code hide show and toggles. Reference your jQuery libraries: (CODE) Include your new external js/jQuery file: (CODE) Write your first lines of code to setup your site for jQuery…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now