I have some JavaScript (physical file located in /SiteAssets library) that should delete an item in a SharePoint list.

We have existing JavaScript code that retrieves data from the list - it looks like this:

(notice that since the JavaScript runs on a PDP in context of the current user, we don't need a specific access token for the request)

var data = $.ajax({
    url: projSiteUrl + "/_api/lists/getbytitle('<listname>')/items,
    type: "GET",
    dataType: "json",
    async: false,
    headers: {
        Accept: "application/json;odata=verbose"  
    }       
});

So I thought that I could write similar code to delete an item from the list again. I read on .aspx#HTTPOps that the REST endpoint of SharePoint supports the "normal" REST verbs, so I wrote this, using the DELETE HTTP verb.

var restUrl = spSiteUrl + '/_api/web/lists/GetByTitle(\'' + listTitle + '\')/items(' + itemId + ')';
jQuery.ajax({
    url: restUrl,
    type: "DELETE",
    headers: {
        Accept: "application/json;odata=verbose"  
    }       
})

But I am getting a 403 (FORBIDDEN) when requesting.

I guess the question is: Am I wrong in assuming that the DELETE verb is supported?

Thanks :-)

I have some JavaScript (physical file located in /SiteAssets library) that should delete an item in a SharePoint list.

We have existing JavaScript code that retrieves data from the list - it looks like this:

(notice that since the JavaScript runs on a PDP in context of the current user, we don't need a specific access token for the request)

var data = $.ajax({
    url: projSiteUrl + "/_api/lists/getbytitle('<listname>')/items,
    type: "GET",
    dataType: "json",
    async: false,
    headers: {
        Accept: "application/json;odata=verbose"  
    }       
});

So I thought that I could write similar code to delete an item from the list again. I read on https://msdn.microsoft./en-us/library/office/jj164022.aspx#HTTPOps that the REST endpoint of SharePoint supports the "normal" REST verbs, so I wrote this, using the DELETE HTTP verb.

var restUrl = spSiteUrl + '/_api/web/lists/GetByTitle(\'' + listTitle + '\')/items(' + itemId + ')';
jQuery.ajax({
    url: restUrl,
    type: "DELETE",
    headers: {
        Accept: "application/json;odata=verbose"  
    }       
})

But I am getting a 403 (FORBIDDEN) when requesting.

I guess the question is: Am I wrong in assuming that the DELETE verb is supported?

Thanks :-)

• javascript
• rest
• odata
• sharepoint-online

Share Improve this question Follow asked Feb 4, 2016 at 7:50 Jesper Lund StocholmJesper Lund Stocholm 2,02333 gold badges3232 silver badges5050 bronze badges 1

• you can use spservices library. It is really good github./sympmarc/SPServices – Satyaki Chatterjee Commented Feb 4, 2016 at 8:13

Add a ment  | 

1 Answer 1

Sorted by: Reset to default 4

Ok, so apparently I do need the digest when doing modifications - but not for simple data retrieval.

If I change my code to

jQuery.ajax({
    url: restUrl,
    type: "DELETE",
    headers: {
        Accept: "application/json;odata=verbose",
        "X-RequestDigest": $("#__REQUESTDIGEST").val(),
        "IF-MATCH": "*"
    }       
}).

... it works with a simple AJAX request using the REST HTTP verb DELETE :-)