#pages 3 articles

• A user with Read on one page only is denied at the site root URL — link to the page, not the sitegotchas / permissionsWhen a principal has Read on a single page in Site Pages and only Limited Access on the site, opening the site URL ends on AccessDenied.aspx even though the page itself opens fine — so a link that falls back to the…
• Creating a modern page via REST is a three-step dance, not one POSTgotchas / rest-apiCanvasContent1 won't stick on create; create → SavePageAsDraft → Publish, canvas is JSON; plain JSON is enough, Description needs its own write and a re-publish; the file name is random — rename with moveto
• Putting an Image web part on a modern page via REST — the control JSON that renders, with a linkgotchas / rest-apiOut-of-the-box Image web part (d1d91016-…) in CanvasContent1: file ids in properties + customMetadata, the URL in serverProcessedContent.imageSources, the click target in links.linkUrl; works in a full-width section…