Finding a permission for a list or site is not a tough task to talk about but the process of getting to it the number of clicks required might be little cumbersome for lot of people. Specially when you want to look at lot of lists and sites simultaneously. In SharePoint or SharePoint online the only way is to find the settings page either site or lists or library and locate the link called site permissions or list permissions

It would be very convenient and intuitive if let’s say there is a single page where i provide a URL of a site and get the permissions for this particular site, and then change the URL get another. What if we can display the permission of the lists in one page. You can pick the lists you want as you wish.

This article will describe the methods i used with the Jquery codes that will help you nail that problem.

Rest Api’s Used

• weburl+”/_api/Web/lists”
  • Displays all the lists present inside the Site
• weburl+”/_api/web/lists?$filter=HasUniqueRoleAssignments”
  • Displays all the lists present inside the site which has uniquepermission
• weburl+”/_api/Web/RoleAssignments?$expand=Member,RoleDefinitionBindings”
  • This displays all the users and groups with the permission level they have in the provided web.
• weburl+”/_api/Web/lists/getbytitle(‘”+listtitle+”‘)/RoleAssignments?$expand=Member,RoleDefinitionBindings”
  • This displays all the users and groups with the permission level they have in the provided web
• Fields we used- Title (Group or User Name), Name(Permission Name), Description( Permission description).

CSS Used

<style&amp>
.main{
min-height:20px;
padding:5px;
margin-bottom:5px;
color:white;
background-color: #0072C6;
width:50%;
}

input#txtbox {
 width: 350px;
 height: 30px;
}

#currentindex&amp;gt;div {
 background-color: #0072C6;
 padding: 5px;
 color: white;
 width: 50%;
 }

</style>

Scripts Used

<script src="https://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js" type="text/javascript"></script>
<script type="text/javascript" src="/_layouts/15/SP.RequestExecutor.js"></script>
<script type="text/javascript">$(document).ready(function () {
//display list function
 $("#btndisplaylist").click(function(){
 var currsite= $('#txtsite').val();
 if(checkvalues())
 { $('#currentindex').hide();
 $('#divlistperm').show();
 var endpointgetlist= currsite+"/_api/Web/lists";
 $('#ddllists').empty();
 getJson(endpointgetlist).done(function(data){
 var lists= data.d.results;
    lists.forEach(function(listitem){
    $('#ddllists').append($('

<option>', {
                    value: listitem.Title, text : listitem.Title }));
       });
 })
.fail(
 function(error){ console.log(JSON.stringify(error)); });
  }
 });
//display list function ends here

//display lists that has unique permission
 $("#btndisplayuniquelist").click(function(){
  var currsite= $('#txtsite').val();
   if(checkvalues())
  {
     $('#currentindex').hide();
     $('#divlistperm').show();
     var endpointgetlist= currsite+"/_api/Web/lists?$filter=HasUniqueRoleAssignments";
      $('#ddllists').empty();
     getJson(endpointgetlist).done(function(data){
            var lists= data.d.results;
            lists.forEach(function(listitem){
              $('#ddllists').append($('


<option>', { value: listitem.Title,text : listitem.Title }));
            });
      })
    .fail( function(error){ console.log(JSON.stringify(error)); });
  }
 });
//display lists that has unique permission ends here

//checksite permission
 $("#chksiteperm").click(function(){
    var currsite= $('#txtsite').val();
    var endpointUrl = currsite+"/_api/Web/RoleAssignments?$expand=Member,RoleDefinitionBindings";
    $('#divlistperm').hide();
    $('#currentindex').show();
    if(checkvalues()) {
        getJson(endpointUrl).done(function(data) {
        var items = data.d.results;
        items.forEach(function(item){
        var roles= item.RoleDefinitionBindings.results;
        var currid= item.Member.Title.replace(/[ ,]+/g, "");
        currid= currid.replace('(','');
        currid=currid.replace(')','');
        currid=currid.replace(/[^a-z0-9\s]/gi,'');
        $('#currentindex').append("


<div id="+currid+"><i style='color:#e3f178;font-size: 16px;'>"+item.Member.Title+"</i>
<b>Permissions</b></div>


");
       roles.forEach(function(roledef){
       if($('#'+currid).is(":contains('"+roledef.Name+"')"))
       { }
       else{
        $('#'+currid).append(""+roledef.Name +":"+roledef.Description);
           }
        });
       });
     })
 .fail( function(error){
    console.log(JSON.stringify(error)); }); } });

//check site permission ends here

//check list permission
 $('#chklistpermission').click(function(){
      var listtitle= $('#ddllists').find(":selected").text();
      var currsite= $('#txtsite').val();
      var endpointUrl = currsite+"/_api/Web/lists/getbytitle('"+listtitle+"')/RoleAssignments?$expand=Member,RoleDefinitionBindings";
      if(checkvalues())
      {
        $('#currentindex').show();
        $('#currentindex').empty();
        getJson(endpointUrl).done(function(data) {
            var items = data.d.results;
            items.forEach(function(item){
            var roles= item.RoleDefinitionBindings.results;
            var currid= item.Member.Title.replace(/[ ,]+/g, "");
            currid= currid.replace('(','');
            currid=currid.replace(')','');
            currid=currid.replace(/[^a-z0-9\s]/gi,'')
            $('#currentindex').append("


<div id="+currid+">


<div class='principlename'><i style='color:#e3f178;font-size: 16px;'>"+item.Member.Title+"</i>
");
            roles.forEach(function(roledef){
                if($('#'+currid).is(":contains('"+roledef.Name+"')"))
                     {}
                else{
                   $('#'+currid).append(""+roledef.Name +":"+roledef.Description );
                    }
                  });
         });
         })
    .fail( function(error){console.log(JSON.stringify(error)); }); }
 });
//end check list permission

/*ends the document.ready here */
});

//json call function
 function getJson(url)  {
    return $.ajax({
             url: url,
          type: "GET",
          contentType: "application/json;odata=verbose",
        headers: {"Accept": "application/json;odata=verbose" }     });
         }
//end json call function

//function to check if site url is null
     function checkvalues()
     {
       var currsite= $('#txtsite').val();
       var str='';
       if(currsite=='')
       {
        str +='Site Url cannot be empty'
        };
       if(str=='')
        {
         return true;
        }
       else{
        alert(str);
        return false;
            }
      }
    //end function                      

</script>

Html Used

<div id="chkpermission">
<label for="enterlistname" style="font-weight:bold;font-size:16pxl">Enter the site URL (Please enter the full URL like https://www.google.com)</label>

<input id="txtsite" type="text" size="60px" height="30px" style="margin-top:5px;">
<input id="chksiteperm" type="button" value="Check Site Permission">
<input id="btndisplaylist" type="button" value="Display All Lists"> <input id="btndisplayuniquelist" type="button" value="Display Lists With Unique Permission">
<div id="divlistperm" style="display:none"><select id="ddllists">
</select> <input id="chklistpermission" type="button" value="Check List Permission"></div>
</div>
<div id='currentindex'></div>

Put all the code in a single HTML file save it and upload to a document library.

Add a page edit it add Content Edito webpart from the web part gallery to the page.

In the text link provide the link to the HTML file we just created.

 

If you have followed all the steps then your HTML file should look like following.

1. The text-box requires a full URL of your site or sub-site. Enter the site URL and

as shown in above image Enter the Site URL and click on the button check permission. It will display all the groups or users which have permission in this particular web or site. In the above picture Alearner is a user whereas all others are groups.  If there are any users or groups added directly to the sub-sites or lists and libraries they are automatically provided limited access to the top level site.

2. Click on Display all Lists

3. Click on Display lists with Unique Permissions

4. Check list permission

As seen in above images there is a button next to each list called Check List Permission. Which when clicked will list the users and groups which have permission to that particular lists.

This way from a single page using just j query and rest api we can create a HTML page that will lists the permission for any site or site content.