Unauthorized Error using web api with REST in different site collection the add-in isn't deployed at

Question

I'm trying to write a sharepoint 2013 add-in that reads certain list info from a bunch of site collections i get first and write into an array, however whenever i try to access any sitecollection but the current one the add-in is deployed at, all i get is a login screen with "your connection to this site is not private" and any sharepoint credentials not working, canceling that gives me

app url/_api/SP.AppContextSite(@target)/web/lists@target=%27*site collection url*%27 401 (Unauthorized)

The code i'm currently using is

searchDocumentLibrary2(pathURL, parent) {       

let that = this;
    return new Promise(function (resolve, reject) {
        $.getScript(pathURL + "/_layouts/15/SP.RequestExecutor.js").done(function (script, textStatus) {

            var executor = new SP.RequestExecutor(that.appWebUrl);

            executor.executeAsync(
                {

                    url: that.appWebUrl + "/_api/SP.AppContextSite(@target)/web/lists?@target='" + pathURL + "'",
                    method: "GET",
                    headers: { "Accept": "application/json; odata=verbose" },
                    success: function (data) {
                      > bunch of stuff

                        resolve(>bunch of stuff);
                    },
                    error: function (data) {
                        >bunch of other stuff
                        reject(>bunch of other stuff);
                    }

              });
       });
    });
}

The Add-in does have Tenant permissions.

All JavaScript calls to SharePoint will be executed with the user+add-in policy. So the executing user should also have an access to these site collections (and lists). Is this the case? — djvuk
– djvuk, Commented Jul 20, 2016 at 8:23
I'm using a user that has access to everything, so yes that is the case — Thun
– Thun, Commented Jul 20, 2016 at 8:34
For cross sitecollection scripts to work you need to give Tenant level permissions to app and also requires Tenant scope deployment — Unnie
– Unnie, Commented Jul 20, 2016 at 9:44
As Unnie said i also had to deploy the app tenant scoped, that fixed it, would be good if you posted it as answer so i can upvote it — Thun
– Thun, Commented Jul 20, 2016 at 11:37

Unnie · Accepted Answer · 2016-07-20 11:55:20Z

0

For cross site collection scripts to work in app you have to do below things:

Tenant level permissions
Tenant scope deployment of the app.

answered Jul 20, 2016 at 11:55

Unnie

8,8191 gold badge23 silver badges36 bronze badges

Add a comment |

Stack Exchange Network

Unauthorized Error using web api with REST in different site collection the add-in isn't deployed at

1 Answer 1

Your Answer

Hot Network Questions

Unauthorized Error using web api with REST in different site collection the add-in isn't deployed at

1 Answer 1

Your Answer

Sign up or log in

Post as a guest

Related

Hot Network Questions