Can we secure the Notes URL access in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/<noteGuid> from direct URL browsing in case of Notes Entity Permission enabled to Global.
It should be accessible to public inside the website but NOT from outside the website. Any CORS /Other setting help?
We highly recommend users to migrate to PowerUsers community for new Portal questions:
powerusers.microsoft.com/.../PowerAppsPortals
Hi, does the anonymous user need read privileges? you can have the anonymous just writing and not reading in your entity permissions
------------
If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.
Hi Madhu,
The url that you don’t want anonymous user can access should in one page, so you can assign
Authenticated Users’ web role to the page as I mentioned above.
https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/webpage-access-control
Regards,
Leah Ju
Please mark as verified if the answer is helpful. Welcome to join hot discussions in Dynamics 365 Forums.
Thank you Leah.
In our case, an anonymous user need to upload a document to a form(entity).
After user uploaded a document, we need to secure this attachment from accessing anonymously with url _entity/annotation/<noteGuid>.
Can this be control with session / any other settings?
Hi Madhu,
You need assign ‘Authenticated Users’ web role to this note entity permission which make unauthenticated users can’t access the entity records.
you can refer following link to know more about web role.
https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/create-web-roles
1.One way is adding web role to the entity permission.
Go Portal Management > Entity Permission to click one permission for the entity you need.
2.Another way is adding entity permission to the web role.
Go Portal Management > web Role
Two ways has the same result, you can select either of these two ways.
Also, you can access web role to the page or website to control the access to the portal.
https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/webpage-access-control
https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/website-access-permission
Leah Ju
Please mark as verified if the answer is helpful. Welcome to join hot discussions in Dynamics 365 Forums.
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,240 Super User 2024 Season 2
Martin Dráb 230,149 Most Valuable Professional
nmaenpaa 101,156