How to build SharePoint online App that validated with MSFT

Question

Hi,

We want to develop a SharePoint Online App that can do attribute-based access control for file and page accessing.

there are two options that we have now.

1. One option is: develop a forward proxy located between client and SharePoint online to intercept request and block the request if user don't have permission.
2. Another option is: develop a SPFx extension and modify context of a SharePoint page, but it has limitations

Do you mind letting me know which option is recommended by MSFT as standard solution. If there is any other good option that can do attribute-based solution, just feel free to let us know then it should be very helpful.

If needed, we can have a live session to review two options

Answer 1

In my opinion, the first option to develop a forward proxy located between client and SharePoint online to intercept request and block the request if user don't have permission is recommended.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.