Service | Customer Service, Contact Center, Fie...

Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

(0) Share

Report

Posted on by BABU M

Can we secure the Notes URL access in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/<noteGuid> from direct URL browsing in case of Notes Entity Permission enabled to Global.

It should be accessible to public inside the website but NOT from outside the website. Any CORS /Other setting help?

All responses (4)

Answers (0)

Suggested answer

oliver.rodrigues 4,052 on at

Like (0)

Report

RE: Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

We highly recommend users to migrate to PowerUsers community for new Portal questions:

powerusers.microsoft.com/.../PowerAppsPortals

Hi, does the anonymous user need read privileges? you can have the anonymous just writing and not reading in your entity permissions

------------

If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.
Community Member on at

Like (0)

Report

RE: Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

Hi Madhu，

The url that you don’t want anonymous user can access should in one page, so you can assign

Authenticated Users’ web role to the page as I mentioned above.

https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/webpage-access-control

Regards,

Leah Ju

Please mark as verified if the answer is helpful. Welcome to join hot discussions in Dynamics 365 Forums.
BABU M 5 on at

Like (0)

Report

RE: Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

Thank you Leah.

In our case, an anonymous user need to upload a document to a form(entity).

After user uploaded a document, we need to secure this attachment from accessing anonymously with url _entity/annotation/<noteGuid>.

Can this be control with session / any other settings?
Community Member on at

Like (0)

Report

RE: Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

Hi Madhu,

You need assign ‘Authenticated Users’ web role to this note entity permission which make unauthenticated users can’t access the entity records.

you can refer following link to know more about web role.

https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/create-web-roles

1.One way is adding web role to the entity permission.

Go Portal Management > Entity Permission to click one permission for the entity you need.

2.Another way is adding entity permission to the web role.

Go Portal Management > web Role

Two ways has the same result, you can select either of these two ways.

Also, you can access web role to the page or website to control the access to the portal.

https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/webpage-access-control

https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/website-access-permission

Leah Ju

Please mark as verified if the answer is helpful. Welcome to join hot discussions in Dynamics 365 Forums.