I successfully developed custom application for my client and it's working.
The task was to allow to my application to read and download files from one specific folder where our client can manage files.
The only way i found to be able to download files uploaded by another user is to authenticate as some user who has such access.
And here is the the problem: to provide such an access i needed to request next permissions:
And the problem is that with "Manage user" permission i can request the list of users, and find Admin id and work on behalf of admin user. And so i can get access to all folders and files, and i'm not supposed to have one.
Could you advise me something how to deal with this problem so i will be able to access specific folder only?
Please sign in to leave a comment.