This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 54%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Hi
I'm struggling with finding a solution to the following exercise:
I'm having a SP list with workflows that send URL link to the edit forms. Currently, the users receive standard URL which is http://myorgsite.net/sp/lists/list_name/form_1.aspx?ID=123, where 123 is the value of ID field. Basically, users can access the form of any other item from the list by changing the value at the end of the URL.
I thought of two approaches to this challange
encrypt/hash the URL link so the users will not get possibility to edit anything; or
change the part of the URL link so the other field would be used. e.g http://myorgsite.net/sp/lists/list_name/form_1.aspx?REF=2h34y324n where "2h34y324n" is the value of calculated field
I would appreciate an assistance in resolving this challange
Hi @Michal_ww ,
I am checking to see how things are going there on this issue. Please let us know if you would like further assistance.
You can accept the helpful post as answer to help other community members find the helpful information quickly.
You can also share your own solution here and mark it as answer, and we can learn from each other.
is there any way to fully mask the URL then?
When the user visits this url, page will be automatically forwarded to edit form.
The disadvantage is that the user can see the decrypted eidt form url through the developer tool, and then he can still edit other items by modifying the ID value.
Do you have any other ideas how I could handle this potential issue with changing ID value?
Is it possible to apply form level permission to the item?
We can only restrict user edit items through item level permissions.
could you please advise how to do it?
You can give users only read permission in the corresponding list, and give edit permission to items that need him to edit.
User permissions and permission levels in SharePoint Server
Thanks for the guidance.
However one question - is it possible to apply dynamic permissions basing on a column(s)?
for example if user login name is found in one of specified column then the user can edit the item
This can be achieved through workflow or event receiver.
Example:https://truapps.portalfront.com/how-toset-sharepoint-item-level-permissions-based-on-column-or-field-values.html
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
As I know,it's impossible to achieve this.ID Number id is the unique identifier of item，and it is auto-incremented for you automatically.Without the ID, it is impossible to determine which item is being edited in the editform.
If you do not want the user to edit other item,you could try to use permission.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.