Forum Discussion
Site Collection App Catalog - External Users
Hi Nigel,
I would also like to have the set-up you describe, with separate environments running separate versions of the code, but have had the same problem that External Users see an error message when viewing a page with an SPFx WebPart.
I believe I now have this working in a development tenancy. I enabled external sharing for the tenant App Catalog and added "Everyone" to the Visitors group. I can now see the page with the SPFx WebPart.
I followed the steps below to reproduce the problem:
- Created a new Site Collection and enabled external sharing
- Configured the Site Collection to have its own App Catalog
- Uploaded an SPFx App into the App Catalog
- Added the App to my Site
- Created a Site Page and added the SPFx WebPart
- Shared the Site with an external user
When I logged-in to the Site as the external user, I saw the error message you describe.
I checked the tenant App Catalog and noticed that the Everyone except External Users group has Read permissions but the Everyone group has no permissions. I enabled external sharing for the tenant App Catalog (I selected the "Allow sharing only with the external users that already exist in your organization's directory" option) and added the Everyone group to the Visitors group. When I logged-in as the external user, I was able to view the page and the SPFx WebPart.
The problem seems to be with the permissions on the tenant App Catalog, not the site App Catalog. I will try making the permissions more restrictive, as allowing Everyone access is not ideal. In my case, I can just share with the specific external users who need to use the WebParts.
Regards,
David Preston
Hey David - thanks for the reply. Thought I would test it out, this is the process I followed:
- login to site, create blank modern page (no web parts)
- access blank page with external user - access successful
- add a text web part to the page
- access blank page with external user - access successful
- add a custom web part that is in the tenancies app catalog
- access blank page with external user - access successful
- add a custom web part that is in the site coll app catalog
- access blank page with external user - access FAIL
- remove custom web part that is in the site coll app catalog
- access blank page with external user - access successful
Ok - so it is when there is a web part from the local site collection's app catalog that is causing the issue
- check the external user has read access to the local catalog - true
- give "Everyone" read access to the tenancies app catalog
- access blank page with external user - access successful
- add a custom web part that is in the site coll app catalog
- access blank page with external user - access FAIL
- open the tenancies app catalog site for sharing to anonymous users
- confirm my external user can access to the app catalog site
- add a custom web part that is in the site coll app catalog
- access blank page with external user - access PASS
WOW!!!
So it seems for an external user to access a page that includes a web part from an app deplyed to the Site Collection App Catalog, that external user must have specifcally been given permissions to access the tenancies app catalog - i.e. the tenancies app catalog site must be shared to them so that they have read access.
HOWEVER
This level of access is not required for external users to run a page containing a webpart in the tenancies app catalog
?!?!?
Bit weird - but I guess there is a path forward, even if it is not a great one
Thanks for the info David
