PowerApps Portal Security Part 1: Understanding the Limitations
Why entity permissions add link-entity joins to your list queries, and how to avoid hitting the limit.
Partly superseded
Between 2020 and 2021 I wrote a handful of posts about Power Apps portals, mostly about problems I kept running into that the official docs didn’t cover well. The original site went offline, so I’ve restored them here from the Internet Archive. The URLs haven’t changed, so old links still work.
Microsoft has since renamed PowerApps Portals to Power Pages, along with most of its parts. I kept the original terms in the posts, and each one has a short table mapping the old names to the new ones.
How entity permissions shape every query the portal runs, and how to work with them. Read in order.
Why entity permissions add link-entity joins to your list queries, and how to avoid hitting the limit.
Partly superseded
A small Liquid web template that shows you the FetchXML your entity permissions actually produce.
Still applies
Using one web page, three entity forms and a bit of Liquid to lock a record once it has been submitted.
Still applies
Adding a separate Save button so users can keep a draft without submitting it.
Still applies
Saving an entity form in the background with jQuery, without reloading the page.
Superseded
How the portal cache works, and why the same record can show different data depending on how a list is sorted.
Partly superseded
Dynamic field and section validation helpers, and CSS to hide sections by name. Referenced from several of the notes.
Partly superseded