Home » Microsoft » 70-488 » What should you do?
You need to ensure that the CourierMobile app determines whether the franchisee owns the account.
What should you do?
A. Use OAuth and App only security. Request the Read right from the http://sharepoint/content/ sitecollection/web/list scope URI.
B. Use OAuth and App+User security. Request the Read right from the http://sharepoint/content/ sitecollection scope URI.
C. Use SPSecurity.RunWithElevatedPrivileges to connect to SharePoint and read from the Accounts list in the site collection.
D. Use the SharePoint user credentials of the bicycle messenger to connect to SharePoint and read from the Accounts list in the site collection.
Correct Answer: B
Explanation/Reference:
* SharePoint users three types of authorization policies. The user-only policy requires only that the call to SharePoint include an authenticated user identity. The app-only policy requires only that the call include only an authenticated app identity. The user+app policy requires that the call include both kinds of authenticated identities.
* You may have already heard that OAuth 2.0 plays an important role in the authentication and authorization of apps for SharePoint. It does, but it is not necessarily a part of the authorization story for every app for SharePoint. If you plan to build an app for SharePoint that runs in an remote web application and communicates back to SharePoint using server-side code, you will need to use OAuth.
Scenario:
* The CourierMobile app must be able to connect to the SharePoint Customers list and verify whether the account belongs to the franchisee to avoid pickups or deliveries to customers that do not belongs to the franchisee. When the CourierMobile add accesses the Customers list, it must only read its contents with the minimum permissions necessary.
* Margie’s Travel provides an API to enable external developers to authenticate by using OAuth and claims-based authentication. Many couriers are members of Margie’s Travel
Reference: Authorization and authentication of apps for SharePoint 2013
