As a SharePoint architect or a SharePoint developer, you must have been thinking about the benefits/limitations of SharePoint apps a lot. I want to point out one of them today, which is very important: using custom webservices deployed to SharePoint inside apps. That is impossible and it is designed to be so due to the security architecture in the sharepoint app framework. I have read much about SharePoint apps (books, whitepapers, blog posts) and stumbled over these two contradictive statements:

There are much info about standard permission levels in SharePoint. Here is my visualization for that. Just a little bit easier to find out the right permission level. Enjoy: Full Control (FullMask) Design Contribute Read Limited Access Restricted Reader Manage Hierarchy Approve ViewListItems x x x x x x AddListItems x x x x EditListItems x x x x DeleteListItems x x x x ApproveItems x x OpenItems x x

Want to hide my site link without disabling social features. Well, the simplest way to do it is to use css: #mp1\_0\_0\_Anchor { display: none; } ```If you want to hide my profile instead, just hide #mp1\_0\_1\_Anchor: #mp1_0_1_Anchor { display: none; } .ms-MenuUIUL li[text=‘My Site’] { display: none;} ##### Disable the my profile feature An even better solution is maybe to disable the ability to change the profiles. [Just remove the permission to "user personalization.