Item Level Permissions And Code Access

Item Level Permissions

We can enable Item-level Permission on a list so that only the creator will be able to read the item. For other users the item won't be displayed.

As an Administrator, you can go to the List, List Settings, then Advanced Settings to enable Item-level Permissions.

Advanced Settings

Testing from Browser Access

Create a new item as Site Collection Administrator or Site Owner User.

List Settings

Now login as a different user who is just a contributor. You won’t’ be able to see the Admin item now.


Now create a new item.

create a new item

Now login back as Administrator & you can see both the items.


Note: Site Collection Administrator or Site Owner can view all the used Items.

Testing from Code Access

Now let us see the Item-level Permission applies to Code Access as well. For this I am using CSOM Code with/without Network Credential class.

By default the code runs under Login User which is Administrator.

  1. static void Main(string[] args)  
  2. {  
  3.     ClientContext context = new ClientContext("http://sharepoint");  
  4.     List list = context.Web.Lists.GetByTitle("Restricted Contacts");  
  5.     ListItemCollection items = list.GetItems(CamlQuery.CreateAllItemsQuery());  
  6.     context.Load(items);  
  7.     context.ExecuteQuery();  
  8.     foreach(var item in items)  
  9.     {  
  10.         Console.WriteLine(item["Title"]);  
  11.     }  
  12.     Console.ReadKey(false);  
  13. }  
Executing the code you can see both the items are displayed, since we are Administrator/Site Owner user now.

Executing the Code

Now apply the contributor User Credential to test the User Context.
  1. ClientContext context = new ClientContext("http://sharepoint");  
  2. context.Credentials = new NetworkCredential("sharepoint\\tim""Welcome123");  

This concludes that Item-level Permission applies to Code Access as well & Site Collection Administrators/Site Owners can view all items in both browser & code access scenario.

Note: Item-level Permissions is a great feature. Without this we would have required custom code to break the permission & assign permission to the created user.



In this article we have explored Item Level Permissions & CSOM code with different User Contexts.