Open
Description
Target SharePoint environment
SharePoint Online
What SharePoint development model, framework, SDK or API is this about?
💥 SharePoint Framework
Developer environment
Windows
What browser(s) / client(s) have you tested
- 💥 Internet Explorer
- 💥 Microsoft Edge
- 💥 Google Chrome
- 💥 FireFox
- 💥 Safari
- mobile (iOS/iPadOS)
- mobile (Android)
- not applicable
- other (enter in the "Additional environment details" area below)
Additional environment details
- browser version Google Chrome (Version 114.0.5735.90), Microsoft Edge Version 132.0.2957.115 (Official build) (64-bit)
- SPFx version
- Node.js version
- etc
Describe the bug / error
When attempting to create a sharing link for any user with any email and "View" permissions, the API returns an error message stating:
"Member could not share with higher permissions."
{"request":{"createLink":true,"settings":{"linkKind":6,"expiration":null,"role":1,"restrictShareMembership":true,"updatePassword":false,"password":"","scope":2,"nav":""},"peoplePickerInput":"[{\"Key\":\"[email protected]\",\"DisplayText\":\"[email protected]\",\"IsResolved\":true,\"Description\":\"[email protected]\",\"EntityType\":\"\",\"EntityData\":{\"SPUserID\":\"[email protected]\",\"Email\":\"[email protected]\",\"IsBlocked\":\"False\",\"PrincipalType\":\"UNVALIDATED_EMAIL_ADDRESS\",\"AccountName\":\"[email protected]\",\"SIPAddress\":\"[email protected]\",\"IsBlockedOnODB\":\"False\"},\"MultipleMatches\":[],\"ProviderName\":\"\",\"ProviderDisplayName\":\"\"}]"}}
{"error":{"code":"-4, System.InvalidOperationException","message":{"lang":"en-US","value":"Member could not share with higher permissions."}}}
This indicates that the user is unable to share items due to permission restrictions within the SharePoint environment.
Steps to reproduce
- Attempt to create a sharing link using the SharePoint Online backend API for a user who already has access.
- Observe the error message returned by the API.
Expected behavior
The user should be able to create a sharing link without encountering permission errors and regardless of the permission level chosen, provided they have appropriate sharing permissions set at the site level.