Hi Guys,
I'm going to be creating a web service that returns a list of items, the list of items that is returned should be different dependant on a users permissions(i.e. what items their allowed to see). The web service will be accessed from a info path form sitting in a SharePoint forms library. What is the best way to determine the current user so that the web service returns the right items, I don't really want to have the form passing a username or credentials to the service as the tricky part is that every user will be allowed to edit the form("so in theory could change it to pass whatever username they wanted to the service"). The only possible idea I have is to use managed code that calls a function from an assembly hosted on the sharepoint server, that acts as an intermediatory, with the function querying the web service and returning the results(keeping the web service hidden). Most of this is really new to me, any suggestions would be greatly welcomed.
p.s what sort of checking does infopath do before it publishes a form? would it allow to publish a form that has code that doesn't work, i'm thinking if a users editing a form without access to the assembly(that populates the list) would it ever publish?
Cheers,
Scott.