Applying in-app security
As we build our apps, there are going to be screens that we only want our elevated users to access—for example, administration screens. To achieve this, we need to be able to distinguish users from each other and understand what roles they have available to them.
There are a number of ways in which you can achieve this depending on your exact requirements and how you want to manage your permissions. At the very basic level you can store your list of users and their roles directly within the app. If you want to drive your permissions in a slightly more managed way, then you could look at leveraging the security capabilities of the data source e.g. SharePoint lists or groups, or even move the permissions away to Active Directory security groups.
Just like with the data sources, you need to ask the question “how am I going to manage permissions?” The earlier you ask this in your app design and development, the less rework you’ll need to...
