Check object permission for an entity from client-side

Hello!

As a workaround, you can send HTTP POST requests to the /rest/RightsService/GetCanEdit and /rest/RightsService/GetCanDelete endpoints instead of using sdk.Model.canSave and sdk.Model.canDelete, which are currently not working.

If the user has permission to edit or delete the record, the GetCanEditResult or GetCanDeleteResult response will be empty.

Here is an example:

const httpClientService = new sdk.HttpClientService();
const recordId = await request.$context.Id;
const pds = await request.$context.getPrimaryModelName();
const schemaName = request.$context.dataSchemas[pds].name;
 
const canDeleteEndpoint = 'rest/RightsService/GetCanDelete';
const canDeleteBody = {
    schemaName: schemaName,
    primaryColumnValue: recordId
};
 
const canDeleteResponse = recordId ? await httpClientService.post(canDeleteEndpoint, canDeleteBody) : null;
const canDelete = canDeleteResponse.body.GetCanDeleteResult.length === 0;
console.log("Can delete record " + recordId + "? - " + canDelete);
 
const canEditEndpoint = 'rest/RightsService/GetCanEdit';
const canEditBody = {
    isNew: false,
    schemaName: schemaName,
    primaryColumnValue: recordId
};
 
const canEditResponse = recordId ? await httpClientService.post(canEditEndpoint, canEditBody) : null;
const canEdit = canEditResponse.body.GetCanEditResult.length === 0;
console.log("Can edit record " + recordId + "? - " + canEdit);

Eduard Dovydovskyi,

Thank you !