SharePoint 2013 Hosting – HostForLIFE.eu :: Get Current User Information Using PnP Library In SharePoint Framework

Nov 22nd

Posted by Peter in European SharePoint 2013 Hosting

PnP JavaScript library contains a lot of methods and properties for accessing SharePoint Data. We will see how to use this library in SharePoint Framework to get the current user information. Use the below command to create a SharePoint Framework project,

yo @microsoft/sharepoint

Create a SharePoint Framework project with “No JavaScript” option. So the below code snippet does not have any JavaScript Frameworks and you can reuse it in any JavaScript framework APIs.

After the project creation, use the below npm command to install the PnP JavaScript dependencies to the SharePoint Framework project.

npm install –save @pnp/common @pnp/sp @pnp/logging @pnp/odata

After importing the PnP JS dependencies, import the classes from PnP JS to the web part by adding below lines in the _webpart.ts file.

import { sp } from "@pnp/sp";  
import { CurrentUser } from '@pnp/sp/src/siteusers';

1 2	import { sp } from "@pnp/sp"; import { CurrentUser } from '@pnp/sp/src/siteusers';

So the object is the starting point for accessing all the SharePoint related PnP objects and methods.

CurrentUser object returns the following properties for now. In the future, it may change based on the new properties introduced to the SharePoint and open source contributions to this library. We have to import CurrentUser object from SiteUsers class from the @pnp/sp.

Email: string;
Id: number;
IsHiddenInUI: boolean;
IsShareByEmailGuestUser: boolean;
IsSiteAdmin: boolean;
LoginName: string;
PrincipalType: number;
Title: string;

Add the below code snippet under the _WebPart class in _webpart.ts file in the project. getSPData method calls the PnP request method to fetch the current users’ data from SharePoint. renderData method is used to generate the HTML and pass the value for rendering. Render method renders the HTML in the browser.

//Get Current User Display Name  
private getSPData(): void {      
  sp.web.currentUser.get().then((r: CurrentUser) => {  
    this.renderData(r['Title']);  
  });  
}  
   
private renderData(strResponse: string): void {  
  const htmlElement = this.domElement.querySelector("#pnpinfo");  
  htmlElement.innerHTML = strResponse;  
}  
   
public render(): void {  
  this.domElement.innerHTML = `  
    <div class="${ styles.pnPDemos}">  
      <div class="${ styles.container}">  
        <div class="${ styles.row}">  
          <div class="${ styles.column}">  
            <div id="pnpinfo"></div>  
          </div>  
        </div>  
      </div>  
    </div>`;  
  this.getSPData();  
}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

//Get Current User Display Name

private getSPData(): void {

sp.web.currentUser.get().then((r: CurrentUser) => {

this.renderData(r['Title']);

});

}

private renderData(strResponse: string): void {

const htmlElement = this.domElement.querySelector("#pnpinfo");

htmlElement.innerHTML = strResponse;

}

public render(): void {

this.domElement.innerHTML = `

</div>

</div>`;

this.getSPData();

}

Below is the output based on the code snippet. This returns the current user title value. We can also use other user properties to display in the webpart.

Get Groups of Current User

Based on the current user, we can also get the groups where the current user is the member. CurrentUser.Groups return the collection of SharePoint Groups associated with the current user. Replace the getSPData method with the following code, which is used to fetch the groups associated by the current user in SharePoint site.

//Get collection of SharePoint Groups for the current User  
private getSPData(): void {      
  sp.web.currentUser.groups.get().then((r: any) => {  
    let grpNames: string ="";  
    r.forEach((grp: SiteGroup) =>{  
      grpNames += "<li>"+grp["Title"]+"</li>"  
    });      
    grpNames = "<ul>"+grpNames+"</ul>";  
    this.renderData(grpNames);  
  });  
}

1

2

3

4

5

6

7

8

9

10

11

//Get collection of SharePoint Groups for the current User

private getSPData(): void {

sp.web.currentUser.groups.get().then((r: any) => {

let grpNames: string ="";

r.forEach((grp: SiteGroup) =>{

grpNames += "<li>"+grp["Title"]+"</li>"

});

grpNames = "<ul>"+grpNames+"</ul>";

this.renderData(grpNames);

});

}

I hope, you have learned how to access the current user details in SharePoint Framework webpart using PnP JavaScript Library.

SharePoint 2013 Hosting Recommendation

HostForLIFE.eu’s SharePoint 2013 Hosting solution offers a comprehensive feature set that is easy-to-use for new users, yet powerful enough for the most demanding web developer expert. Hosted SharePoint Foundation 2013 is the premiere web-based collaboration and productivity enhancement tool on the market today. With SharePoint 2013 Foundation, you can quickly access and manage documents and information anytime, anywhere though a Web browser in a secure and user friendly way. SharePoint hosting services start at only at €9.99/mo, allowing you to take advantage of the robust feature set for a small business price. HostForLIFE.eu offers a variety of hosted SharePoint Foundation 2013 plans as well as dedicated SharePoint 2013 Foundation options

SharePoint 2013 Hosting – HostForLIFE.eu :: Fetching SharePoint List Items Using A Simple HTTP REST Command

Nov 15th

Posted by Peter in European SharePoint 2013 Hosting

No comments

In this article, I will introduce you to an online service I created that allows you to code against certain services without using an SDK, simply by sending HTTPS REST commands. In this article, I will demonstrate how this works against SharePoint Online; however other services are also available.

Please note that I built this service with the community in mind, and as a result, it is free for simple use. The service stores your configuration settings securely so that the actual service secrets (such as your SharePoint password) are not stored on the client code.

Developing without an SDK makes it much easier to code IoT, web and Mobile projects, and works regardless of the operating system or programming language. That’s because you can make simple REST commands instead of using an SDK; the call returns a JSON payload with the data.

Let’s see how we can fetch SharePoint List Items using a simple HTTP REST command. The REST method to call is called GetListItemEx. Let’s first look at a raw HTTP command that you can send using Postman for example. There are a few variables to change, which we will review.

GET ENZO_URI/bsc/sharepoint/getlistitemsex HTTP/1.1
authToken: YOUR_AUTH_TOKEN
_config: myconfigname
viewname: mylist
where: State=’FL’

The following variables should be replaced in the above code:

ENZO_URI: this is the URI of your Enzo service endpoint that is assigned to you on the portal
YOUT_AUTH_TOKEN: this is your assigned authToken, also available on the portal
myconfigname: this is a configuration name that you created in the portal that points to SharePoint
viewname: the name of the SharePoint list
where: an optional WHERE clause that looks like a SQL where clause

For example, the following Postman screenshot shows you the REST command I sent to my server, which in turn connected to SharePoint Online to fetch items from the US States list. The name of the configuration is called sharepointroggero (we will see this shortly).

As you can see, there are no SharePoint-specific secrets here; all the details are stored on the portal under the configuration setting called sharepointroggero. Let’s go to the portal and review the configuration settings; once you log in to the portal, click on the SharePoint service on the left, and click on Create. You will see a screen similar to this where you can store your configuration settings.

Now let’s create a small C# Console project to make the same REST call. To try the following source code, you will need to sign up on the Enzo Online portal here, create a configuration setting for SharePoint Online and access your Enzo URI and AuthToken by selecting Enzo Accounts from the menu. The code does essentially the same thing as above: it retrieves the content of a list called MyList using a configuration setting called myconfigname. As discussed previously, this code does not use the SharePoint SDK; it relies entirely on HTTPS REST calls.

using System;  
using System.Collections.Generic;  
using System.Linq;  
using System.Net;  
using System.Text;  
using System.Threading.Tasks;  
  
namespace Sample  
{  
class Program  
{  
static void Main(string[] args)  
{  
    string url = "https://ENZO_URI/bsc/sharepoint/getlistitemsex";  
    string authId = "YOUR_AUTH_ID";  
    WebRequest wr = WebRequest.CreateHttp(url);  
    try  
    {  
        // Add the required HTTP headers for the call  
        wr.Headers.Add("authToken", authId);  
        wr.Headers.Add("viewname", "mylist");  
        wr.Headers.Add("_config", "myconfigname");  
        wr.Method = "GET";  
        var resp = wr.GetResponse();    // Execute the command  
        using (var stream = resp.GetResponseStream())  
        {  
        }  
        Console.WriteLine("HTTP Response: " + ((System.Net.HttpWebResponse)(resp)).StatusCode);  
  
    }  
    catch (Exception ex)  
    {  
        Console.WriteLine("ERROR: Response from " + baseUrl + command + ":" + ex.Message);  
    }  
    Console.ReadKey();  
}  
}  
}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

using System;

using System.Collections.Generic;

using System.Linq;

using System.Net;

using System.Text;

using System.Threading.Tasks;

namespace Sample

{

class Program

{

static void Main(string[] args)

{

string url = "https://ENZO_URI/bsc/sharepoint/getlistitemsex";

string authId = "YOUR_AUTH_ID";

WebRequest wr = WebRequest.CreateHttp(url);

try

{

// Add the required HTTP headers for the call

wr.Headers.Add("authToken", authId);

wr.Headers.Add("viewname", "mylist");

wr.Headers.Add("_config", "myconfigname");

wr.Method = "GET";

var resp = wr.GetResponse(); // Execute the command

using (var stream = resp.GetResponseStream())

{

}

Console.WriteLine("HTTP Response: " + ((System.Net.HttpWebResponse)(resp)).StatusCode);

}

catch (Exception ex)

{

Console.WriteLine("ERROR: Response from " + baseUrl + command + ":" + ex.Message);

}

Console.ReadKey();

}

Similarly, here is a Python sample code that does essentially the same thing.

import sys  
import urllib  
import urllib2  
import requests  
  
enzourl_receiveMsg="https://ENZO_URI:ENZO_PORT/bsc/sharepoint/getlistitemsex"  
enzo_guid="YOUR_AUTH_ID"  

#create the headers this call expects  
headers={  
    'authToken': enzoguid,  
    'viewname': 'mylist',  
    '_config': 'myconfigname'    
}  
response=requests.get(enzourl_receiveMsg,headers=headers)

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

import sys

import urllib

import urllib2

import requests

enzourl_receiveMsg="https://ENZO_URI:ENZO_PORT/bsc/sharepoint/getlistitemsex"

enzo_guid="YOUR_AUTH_ID"

#create the headers this call expects

headers={

'authToken': enzoguid,

'viewname': 'mylist',

'_config': 'myconfigname'

}

response=requests.get(enzourl_receiveMsg,headers=headers)

The purpose of this article was to introduce you to a new development approach that simplifies development, and removes complex SDKs from client code using SharePoint as an example. Additional documentation and sample code is available online.

SharePoint 2013 Hosting Recommendation

HostForLIFE.eu’s SharePoint 2013 Hosting solution offers a comprehensive feature set that is easy-to-use for new users, yet powerful enough for the most demanding web developer expert. Hosted SharePoint Foundation 2013 is the premiere web-based collaboration and productivity enhancement tool on the market today. With SharePoint 2013 Foundation, you can quickly access and manage documents and information anytime, anywhere though a Web browser in a secure and user friendly way. SharePoint hosting services start at only at €9.99/mo, allowing you to take advantage of the robust feature set for a small business price. HostForLIFE.eu offers a variety of hosted SharePoint Foundation 2013 plans as well as dedicated SharePoint 2013 Foundation options

SharePoint 2013 Hosting – HostForLIFE.eu :: SharePoint 2016 Mobile View Not Working On Mobile Devices

Nov 8th

Posted by Peter in European SharePoint 2013 Hosting

No comments

The last couple of days, I got stuck in an issue in which whenever the users browsed the sites on their mobile devices, the Mobile View was not working and it showed a blank page with site collection name written on the top left along with a mobilesuite navbar in the bottom of one of the SharePoint 2016 on-premise farms. When they clicked on the ellipsis and switched to the PC View, nothing happened. It showed just a blank page.

While troubleshooting, if they clicked on the “GoTo” button, it threw the following error message.

“Sorry, it seems like your connection is too slow. Try connecting to Wi-Fi or going somewhere with better reception.”

I have multiple SharePoint farms with different configurations, so I tested the same scenario on two farms. One farm was where I have a User Profile service along with MySite host and the second farm is where the User Profile service is without MySite Host. I tested the below scenario on both, iOS as well as Android, devices and also tried Safari, Chrome, and Samsung browsers.

Farm with UPA and MySite host

When I perform the testing in this farm, I am able to browse the SharePoint sites on mobile devices as well as in the browser. Perfect!

Farm with UPA but no MySite host

When I performed the testing on this farm, I was unable to browse the sites on the mobile devices. That’s pain.

As per the documentation, there is no such requirement of UPA along with MySite host for browsing the sites on the mobile devices. Now, I moved to the next step to deep dive into it and checked what the root cause was.

ULS logs

There is nothing in ULS logs for me even with Verbose logging. I tried different categories but got no clue over here. I used the F12 Developer tool (I configured my browser so it acts as a mobile browser).

In the working farm

If I browse the sites on mobile, I noticed it loaded the following JS files.

mblappbar.js
mblsuitenav.js
touchappstrings.js
touchapp.js
mylinks.js

It rendered the page properly without any error in the developer tool.

In the non-working farm

I opened the sites in a mobile browser and noticed that all the JavaScript files were loading properly except mylinks.js which was not loading at all. After further checking the mylinks.js file, I came to know that this is the file which looks for the information from person.aspx page and that puts the dependency on MySite host. Because we don’t have the MySite host configured in this farm, so there was no person.aspx page, which is where the Mobile View got broken on the mobile devices.

Now, it is a blank page with nothing on it. In developer tools, it showed the error on loading the touchapp.js file. This is the main file which makes calls to all the other JavaScript files.

So now, the question arises why this dependency. To get the answer, I contacted MSFT. As per MSFT, it is a bug and they will fix it in future updates.

Resolution

I created a MySite host site collection and configured it inside of the User Profile Service’s MySite settings. I removed the permission for everyone because we don’t want anyone to create the MySite host on this farm. As soon as the stuff was configured, everything started working as expected.

If you don’t have the MySite host configured in your farm then you will get into this problem. You have to create a MySite host in order to make the mobile view work properly.

Note
If you don’t allow MySite for your users, then you have to remove the permissions from the MySite Host page so that no one can create a MySite page.

Hope this will help you for now. I will update once they release the fix for this one. By the way, this problem exists in SharePoint 2019 preview as well.

SharePoint 2013 Hosting Recommendation

HostForLIFE.eu’s SharePoint 2013 Hosting solution offers a comprehensive feature set that is easy-to-use for new users, yet powerful enough for the most demanding web developer expert. Hosted SharePoint Foundation 2013 is the premiere web-based collaboration and productivity enhancement tool on the market today. With SharePoint 2013 Foundation, you can quickly access and manage documents and information anytime, anywhere though a Web browser in a secure and user friendly way. SharePoint hosting services start at only at €9.99/mo, allowing you to take advantage of the robust feature set for a small business price. HostForLIFE.eu offers a variety of hosted SharePoint Foundation 2013 plans as well as dedicated SharePoint 2013 Foundation options

SharePoint 2013 Hosting – HostForLIFE.eu :: Access Denied Error

Nov 1st

Posted by Peter in European SharePoint 2013 Hosting

No comments

We have a SharePoint 2013 farm and were retracting a solution; we were using Chrome browser. In the browser our site was open in two tabs and in one tab was central admin. When we were trying to retract a solution through central admin we were getting an “Access Denied” error. We are logged in with user having Administrator rights so it seems not to be a user permission issue.

It was a very small fix but I thought to share, as maybe it can save you time.

Error and Stack Trace
Access denied. Only machine administrators are allowed to create administration service job definitions of type

Microsoft.SharePoint.Administration.SPSolutionDeploymentJobDefinition, Microsoft.SharePoint, Version=15.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c.Application error when access /_admin/RetractSolution.aspx, Error=Access denied. Only machine administrators are allowed to create administration service job definitions of type: Microsoft.SharePoint.Administration.SPSolutionDeploymentJobDefinition, Microsoft.SharePoint, Version=15.0.0.0,Culture=neutral,PublicKeyToken=71e9bce111e9429c. at Microsoft.SharePoint.Administration.SPAdministrationServiceJobDefinition..ctor(String name, SPService service, SPServer server, SPJobLockType lockType) at Microsoft.SharePoint.Administration.SPSolutionDeploymentJobDefinition..ctor(String solutionName, Guid solutionId, UInt32 lcid, SPTimerService service, SPCompatibilityRange compatibilityRange) at Microsoft.SharePoint.Administration.SPSolutionLanguagePack.CreateSolutionDeployTimerJob(DateTime... e4a5099e-e182-6064-8575-d8b087e7d93cGeneral 8nca Medium ... dt, Collection`1 webApplications, SPSolutionDeploymentJobType jobType, Boolean globalInstallDlls, Boolean force, Boolean isRestore, SPCompatibilityRange compatibilityRange) at Microsoft.SharePoint.ApplicationPages.SolutionPageBase.CreateDeploymentJob(Boolean deploy, String strSelectedWeb, Boolean globalInstall, DateTime dt, Boolean localDeployment) at Microsoft.SharePoint.ApplicationPages.RetractSolutionPage.BtnSubmit_Click(Object sender, EventArgs e) at System.Web.UI.WebControls.Button.OnClick(EventArgs e) at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsy... e4a5099e-e182-6064-8575-d8b087e7d93c

1

Microsoft.SharePoint.Administration.SPSolutionDeploymentJobDefinition, Microsoft.SharePoint, Version=15.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c.Application error when access /_admin/RetractSolution.aspx, Error=Access denied. Only machine administrators are allowed to create administration service job definitions of type: Microsoft.SharePoint.Administration.SPSolutionDeploymentJobDefinition, Microsoft.SharePoint, Version=15.0.0.0,Culture=neutral,PublicKeyToken=71e9bce111e9429c. at Microsoft.SharePoint.Administration.SPAdministrationServiceJobDefinition..ctor(String name, SPService service, SPServer server, SPJobLockType lockType) at Microsoft.SharePoint.Administration.SPSolutionDeploymentJobDefinition..ctor(String solutionName, Guid solutionId, UInt32 lcid, SPTimerService service, SPCompatibilityRange compatibilityRange) at Microsoft.SharePoint.Administration.SPSolutionLanguagePack.CreateSolutionDeployTimerJob(DateTime... e4a5099e-e182-6064-8575-d8b087e7d93cGeneral 8nca Medium ... dt, Collection`1 webApplications, SPSolutionDeploymentJobType jobType, Boolean globalInstallDlls, Boolean force, Boolean isRestore, SPCompatibilityRange compatibilityRange) at Microsoft.SharePoint.ApplicationPages.SolutionPageBase.CreateDeploymentJob(Boolean deploy, String strSelectedWeb, Boolean globalInstall, DateTime dt, Boolean localDeployment) at Microsoft.SharePoint.ApplicationPages.RetractSolutionPage.BtnSubmit_Click(Object sender, EventArgs e) at System.Web.UI.WebControls.Button.OnClick(EventArgs e) at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsy... e4a5099e-e182-6064-8575-d8b087e7d93c

It seems to be a weird error. No user permission issue.

We Googled a lot and then got the below article related to the same issue but not the exact one.

https://social.technet.microsoft.com/wiki/contents/articles/30757.sharepoint-troubleshooting-access-denied-only-machine-administrators-are-allowed-to-create-administration-service-job.aspx

In the above article the exact issue isn’t mentioned but at least we got an idea. We have closed the browser, opened the central admin again with the run as administrator option, tried again and it worked like a charm.

SharePoint 2013 Hosting Recommendation

HostForLIFE.eu’s SharePoint 2013 Hosting solution offers a comprehensive feature set that is easy-to-use for new users, yet powerful enough for the most demanding web developer expert. Hosted SharePoint Foundation 2013 is the premiere web-based collaboration and productivity enhancement tool on the market today. With SharePoint 2013 Foundation, you can quickly access and manage documents and information anytime, anywhere though a Web browser in a secure and user friendly way. SharePoint hosting services start at only at €9.99/mo, allowing you to take advantage of the robust feature set for a small business price. HostForLIFE.eu offers a variety of hosted SharePoint Foundation 2013 plans as well as dedicated SharePoint 2013 Foundation options

SharePoint 2013 Hosting – HostForLIFE.eu :: How to Create And Use Task List In SharePoint 2013?

Oct 11th

Posted by Peter in European SharePoint 2013 Hosting

No comments

This post will explain you about create task list in SharePoint 2013. Using task list can in SharePoint to track your daily activities, assign task to team members, track due date for daily activities, etc.

First, open SharePoint site. Now, select the Site settings and Add an app.

Click on Task app to create.

Provide the name for the task list. Click Create.
So the new task list has been created successfully. So here’s the task list with timeline. In SharePoint 2013 we have a timeline feature in the task list to track your daily task activities.

Now I am going to assign a task to my team member. Click on new task.
Provide the name for the task.
Provide the task start date and due date.
Assigned to ‘Assign the task to any of your team member’.
Percentage completed and the default will be ‘0’ as in the following screenshot:

Set priority to Low, High, Normal.

Update the status of the task.
Click Save.
Fill the description if u needed and add predecessors.
So the new task has been assigned successfully.

SharePoint 2013 Hosting Recommendation

HostForLIFE.eu’s SharePoint 2013 Hosting solution offers a comprehensive feature set that is easy-to-use for new users, yet powerful enough for the most demanding web developer expert. Hosted SharePoint Foundation 2013 is the premiere web-based collaboration and productivity enhancement tool on the market today. With SharePoint 2013 Foundation, you can quickly access and manage documents and information anytime, anywhere though a Web browser in a secure and user friendly way. SharePoint hosting services start at only at €9.99/mo, allowing you to take advantage of the robust feature set for a small business price. HostForLIFE.eu offers a variety of hosted SharePoint Foundation 2013 plans as well as dedicated SharePoint 2013 Foundation options.

SharePoint 2013 Hosting – HostForLIFE.eu :: Scripting Capabilities, Why SharePoint Framework

Oct 3rd

Posted by Peter in European SharePoint Server 2013 Hosting

No comments

Custom scripting is a vital element of custom development in SharePoint Online. Scripting allows running custom scripts on SharePoint Online sites to achieve the desired result. It may be used to fetch the data from SharePoint or manipulate the DOM structure.

A few features of it are turned off by default. Scripting capability is also one of those features.

Custom Scripting Scenarios

The custom script by default is disabled on the below sites.

SharePoint Online root site collection
Classic SharePoint site collection
SharePoint MySites
Personal OneDrive sites
SharePoint site collection created based on self-service site creation

Mentioned below are a few scenarios which are impacted due to a disabled custom script.

Uploading sandbox solutions
Upload custom master pages and page layouts

If custom scripting is turned off, it does not allow you to upload the below file types.

.master
.aspx
.ascx
.asmx
.htc
.jar
.swf
.xap
.xsf

The following site features are unavailable if the custom scripting is turned off.

Save Site as Template
Save document library as template
Solution Gallery
Theme Gallery
Help Settings
HTML Field Security
Sandbox solutions
SharePoint Designer
Uploading files that potentially include script

Turn on custom scripting

Follow the below procedure to turn custom scripting on.

Open SharePoint Online Admin Center (https://[tenant]-admin.sharepoint.com).
From the left menu, click settings.
Check “Allow users to run custom scripts on personal sites and self-service created sites”.

Enable Custom Script with PowerShell

If it is not feasible to wait for 24 hours until the timer job runs to turn on the custom scripting, we can turn it on using PowerShell.

Download and Install SharePoint Online Management Shell from https://www.microsoft.com/en-us/download/details.aspx?id=35588
Open SharePoint Online Management Shell.
Connect to your SharePoint online tenant.Connect-SPOService -Url “https://[tenant]-admin.sharepoint.com”
Run the below command to enable custom scripting.Set-SPOSite -Identity https://[tenant].sharepoint.com -DenyAddAndCustomizePages 0
To disable scripting capabilities, run this command -Set-SPOSite -Identity https://[tenant].sharepoint.com -DenyAddAndCustomizePages 1

Security Implications

Enabling the custom scripts on SharePoint tenant helps the developers in inserting the script to address different business scenarios. However, we can no longer enforce the governance around what custom script can do and where the scripts can be added to SharePoint.

Anyone who has “Add and Customize Pages” permission can insert the custom code. There are no boundaries for executing the script. This makes it very difficult to identify –

Who has added the custom script?
What code has been added as part of a custom script?
Where the custom script has been added on SharePoint site?

What can custom script do?

The custom script runs in the context of the current logged in user. That means, the script can access everything that a user has access to. Script can also access the content across Office 365 services.

Alternative to Custom Script (SharePoint Framework – SPFx)

To bring the governance, the recommended approach is to use SharePoint Framework (SPFx). Below are features of SPFx:

SPFx runs in the context of the current user
It does not use iFrame
Controls are responsive
SPFx has access to Document Object Model (DOM)
Developer can access the lifecycle
It can be developed using any JavaScript framework (React, Knockout, Angular, etc)
The toolchain is open source (npm, TypeScript, Yeoman, Gulp)
Office 365 admins have governance tool to disable the SPFx solution
SPFx can work with classic and modern SharePoint

Summary

Enabling custom script allows the developers to address business scenarios easily by inserting the scripts. However, it makes it very difficult to bring the governance. SharePoint Framework (SPFx) is a recommended way to implement the solutions that can work for both, classic and modern, SharePoint sites.

European Sharepoint 2013 Hosting Blog

SharePoint 2013 Hosting – HostForLIFE.eu :: Get Current User Information Using PnP Library In SharePoint Framework

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: Fetching SharePoint List Items Using A Simple HTTP REST Command

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: SharePoint 2016 Mobile View Not Working On Mobile Devices

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: Access Denied Error

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: How to Create And Use Task List In SharePoint 2013?

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: Scripting Capabilities, Why SharePoint Framework

BLOGROLL

Featured On

European Sharepoint 2013 Hosting Blog

SharePoint 2013 Hosting – HostForLIFE.eu :: Get Current User Information Using PnP Library In SharePoint Framework

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: Fetching SharePoint List Items Using A Simple HTTP REST Command

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: SharePoint 2016 Mobile View Not Working On Mobile Devices

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: Access Denied Error

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: How to Create And Use Task List In SharePoint 2013?

SharePoint 2013 Hosting Recommendation

SharePoint 2013 Hosting – HostForLIFE.eu :: Scripting Capabilities, Why SharePoint Framework

BLOGROLL

Featured On

Tags