CRM Audio

15 years too late but it's finally here: server-side logic in Power Pages. What does it change in practice? Unlike Azure Functions, it's just another Power Pages asset that can be added to Power Platform ALM. Perfect for anything that is logic-lite/secret-heavy. Think payments and integrations that need secrets. Server-side logic avoids awkward workarounds using plugins, Power Automate, etc. just to keep keys safe. Re-use your Javascript skills though it's not lift-n-shift from the client-side exercise. Just couple new objects to learn: HTTP client for external calls and a Dataverse object for CRUD operations. There are plenty of scenarios where client-side Web API is better, like interaction with external services requiring callbacks, for example. As Nick succulently summed it up: It doesn't make anything possible we couldn't do before. It just makes doing a lot of things we did do before a lot easier. References Power Pages server logic overview (preview) | Microsoft Learn Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

It's one of the biggest Power Pages updates we've seen in years, and we're excited about what it means for the future. We talk about the newest Power Platform release and its biggest change — bringing Power Pages security together with Dataverse roles. We explain how web roles and contact records now work with system users, making Power Pages security act more like Dataverse. We share what we learned from testing the private preview, including how permissions, ownership, and auditing work now, and what the new "C2" users are. We also wonder what this means for performance, licensing, and people building their own portals. References Overview of Power Pages 2025 release wave 2 | Microsoft Learn Unify Power Pages authorization by merging web role with Dataverse security role | Microsoft Learn Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

In this episode, we take a close look at the history of security issues in Power Pages. We start with the early days — when simple misconfigurations like unchecked table permissions and enabled OData feeds led to major data exposures. These weren't bugs, but they showed how easy it was to set things up the wrong way. We talk about how Microsoft responded and what lessons we've learned about secure defaults and clear documentation. We then move on to more serious vulnerabilities introduced by newer features like the Web API. We explain how some of these flaws allowed access to restricted data using filters and sort clauses, and how those issues were eventually patched. These were real product-level bugs, and some were even exploited in the wild. We also share our thoughts on external authentication providers like Google, and the risks that come with delegating authentication — including phishing techniques that can bypass protections. Finally, we reflect on how Power Pages compares to platforms like WordPress, especially when it comes to architecture and the potential for plugin-related vulnerabilities. Despite recent issues, we think the original design of Power Pages deserves credit for holding up well over time. References Power Pages security | Microsoft Learn Tip #1407: How to secure Power Apps portal from making the news - Power Platform & Dynamics CRM Tip Of The Day Engineered Code - Blog - Power Pages: Another "Leak" https://thehackernews.com/2025/01/severe-security-flaws-patched-in.html https://www.bleepingcomputer.com/news/security/microsoft-fixes-power-pages-zero-day-bug-exploited-in-attacks/ https://www.cnn.com/2021/08/24/tech/data-leak-microsoft-upguard/index.html https://www.upguard.com/breaches/power-apps Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

Continuing from the wishlist, in this episode we focus on underused features in Power Pages - capabilities that are built into the platform but often overlooked during development. We discuss features such as redirects, shortcuts, site markers, and web link sets, highlighting where they fit and why they're still relevant, especially for structured navigation and content management. We also cover content snippets, explaining how they support multilingual content, reduce duplication, and allow non-developers to manage content without modifying code. Additional topics: Leveraging form and list metadata instead of custom JavaScript Choosing fetchXML in liquid over Web API for secure, server-side queries The challenges and potential of conditional multistep forms The role of site settings in fine-tuning authentication and behavior A lot of Power Pages features are often overlooked. Hopefully you get some extra ammunition to improve structure, usability, and long-term maintainability across projects. Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

In this episode, we deliver on their promise from the previous show — a wishlist of features they'd love to see in Power Pages (and none of them are AI). It's a mix of practical frustrations from real-world projects and some wild ideas for future innovation. What did we talk about? George's standing desk automation project — powered by Python, Bluetooth, and (eventually) Power Platform. Imagine your desk going up automatically before every meeting! Top Power Pages wishlist items: API to clear the cache — long-requested, simple sounding, yet still missing. Modern Forms — it's time to modernize the end-user experience beyond Bootstrap upgrades. Support for Quick View and Quick Create forms — why only Main forms? Multi-step form improvements — allow skipping between steps, especially when there are no conditions. Bring back Front-Side Editing — content editing without admin rights is a must for real CMS scenarios. Power Automate integration in forms and lists — run flows like classic workflows directly from UI. Framework agnostic design — let's dream big: support Tailwind, Foundation, or other CSS frameworks beyond Bootstrap. What's next? How about a tour of Power Pages features that already exist — but almost nobody uses. Credits Cover image by chatGPT (inspired by terrible prompts) References rhyst/linak-controller: A Python script to control Linak standing desks Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

In the first episode of 2025, Nick and George break down Release Wave 1 2025 for Power Pages, separating real improvements from underwhelming updates. AI features take center stage, but do they actually add value? Discussion covers AI-assisted forms, web agents, and natural language queries, questioning their usefulness in real-world applications. Modern lists get long-awaited updates, including JavaScript event support and metadata filters, finally closing gaps with classic lists. The ongoing file upload saga resurfaces, and the new virus scanning feature raises questions about effectiveness. A streamlined Microsoft Entra ID setup wizard promises easier authentication setup, but handling failed logins remains tricky. A surprising security threat in social logins also comes up — cross-IdP impersonation —where external authenticator can let attackers register an account with someone else's corporate email. With event portals moving from outbound marketing to Power Pages, the clock ticks toward a July 2025 deadline for migration. Anyone still using the old Angular-based event sites needs to start planning now. Want to know what's missing from this release? A wishlist of features Power Pages actually needs is coming next time. Don't miss it! Credits Cover image by chatGPT (inspired by terrible prompts) References Overview of Power Pages 2025 release wave 1 | Microsoft Learn Transition events from outbound marketing to real-time journeys - Dynamics 365 Customer Insights | Microsoft Learn Combining Verification Phishing and Cross-IdP Impersonation Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

In this somewhat warm episode, George and Nicholas explore web templates in Power Pages, breaking down how they work, their history from ADX Studio to modern-day template blocks, the regrets along the way, and practical ways to use them effectively. They discuss features like include and extend, share tips for simplifying your development process, and highlight why templates are a powerful tool for creating reusable components. Whether you're new to web templates or looking to refine your skills, this conversation has something for everyone. As a bonus, they debate what's better as an income stream: Shopify shares or podcasts. Credits Cover image by chatGPT (inspired by terrible prompts) References Web templates | Microsoft Learn Liquid overview | Microsoft Learn Shopify Liquid reference Shopify Stock Quote Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

In this [delayed] episode of Refresh the Cache, George and Nick dive into the latest Wave 2 2024 release notes for Power Pages. They discuss the evolving landscape of agile development, where new features roll out continuously, and release notes serve as checkpoints rather than game-changers. The conversation touches on deprecations, governance updates, and intriguing AI-driven community template features, like thread summarization and AI moderation. They also debate the future of web templates and Power Fx integration. They even make a bet on how Microsoft's event management solution will be implemented. Credits Cover image by chatGPT (inspired by terrible prompts) References Overview of Power Pages 2024 release wave 2 Create an event portal allowing access to event details, registration Important upcoming changes and deprecations in Power Pages Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

CRM Audio: Wave 1 2024: Deprecation not depressionIn this episode, George and Nick dive into the latest updates for Power Pages in the first half of 2024. They discuss new features, enhancements, and important deprecations, providing insights into how these changes impact users and developers. From generative AI integrations and improved file upload capabilities to crucial security updates and professional developer tools, this episode covers everything you need to know about the upcoming Power Pages release. Plus, they share their thoughts on the future of Power Pages and what they hope to see next. Tune in for an informative and engaging discussion on the evolving landscape of Power Pages. Credits Cover image by DALL-E (inspired by terrible prompts) References Overview of Power Pages 2024 release wave 1 Perspectives on Power Platform Important upcoming changes and deprecations in Power Pages Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

In this episode, George and Nick dive into Wave 2 2023 and what it's going to wash out for Power Pages. What's in store? The integration of DocuSign Bootstrap 5 and transition to it The capabilities and future potential of the Power Pages Copilot Upcoming features for administration and governance Enhanced collaboration features in the Power Pages Design Studio Introduction of managed environments New updates on user analytics Credits Cover image by Matt Ragland on Unsplash References Set up DocuSign integration | Microsoft Learn Overview of Power Pages 2023 release wave 2 | Microsoft Learn E-Signatures and Payments in Power Pages - ESPC Conference, 2023 (sharepointeurope.com) Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

What you hear in the opening is a sound clip titled "money count bills". Not sure about that, sounds more like soliders marching on gravel. Why did I pick that sound? Because it was available in the sound effect library I have already paid for. If I didn't have to pay for things, I would have definitely included Pink Floyd. Classic. Or Jerry McGuire saying "Show me the money". In this episode of Refresh the Cache Nick and I talk about how to take the nice customer's money using nothing but Power Pages. Credits Cover Image by Image by Olya Adamovich from Pixabay. References Add a payment gateway to your event website (Dynamics 365 Marketing) | Microsoft Learn Bring data from anywhere with Dataverse virtual table and Power Automate cloud flow integration in Power Pages| Microsoft Power Page Configure Power Automate cloud flows in Power Pages (preview) | Microsoft Learn Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

Everyone misplaces things from time to time. Keys, airpods, sunglasses, wallet; anger, confidence, sense of entitlement... JavaScript in Power Pages is no exception. I know there is script, I can see that annoying debugger keyword, I just have no idea where the fuck did it come from. In this episode of Refresh the Cache Nick and I discuss all the possible locations where script can be hidden in Power Pages while contemplating using Dropbox as a source control alternative. And remember - we never truly lose any material possessions. We only temporarily misplace them. Credits Cover Image by 2211438 from Pixabay. References Using Fiddler AutoResponder: https://learn.microsoft.com/power-apps/developer/model-driven-apps/streamline-javascript-development-fiddler-autoresponder Browser dev tools: https://learn.microsoft.com/microsoft-edge/devtools-guide-chromium/overview Engineered Code Where's That Dynamics 365 Portals Code? Part 1, 2, 3, and 4. Power Pages Tip #212 Stand alone JS File using Web Template Power Pages Tip #215 Web Template MIME Type Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

Raising kids is not an easy task. Nor it is cheap. If you need to talk to your bank about refinancing your mortgage to renovate the house according to the building permit you are yet to apply for and, in case your house is old and potentially has some led paint or asbestos, you would also be trying to keep the kids out of that very house as much as possible by enrolling them in the after-school classes THEN you are in pure luck. All your challenges can be solved by installing a trifecta of Power Pages scenario-based templates. In this episode of Refresh the Cache, Nick & I dive into the Power Pages templates; the good, the bad, and the ugly sides, what they are good for and where they shouldn't be touched. We also answer some important questions such as are there any assets with the prefix "new_", is numbering your pages bad, and who gets a participation medal? To find out, as they say, listen 'till the end! Credits Cover image by Christiana Mergan from Pixabay. Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

In the good old days (insert an old man yelling at the skies image) we didn't have release waves. Instead, every 2-3 years we had a tsunami. Since those days Microsoft has transformed releases into a pacifying surf ranch with persistent but not exactly heart stopping waves. Starting Wave 1, 2023 Power Pages now have a well-deserved their own break in the release plan. Of course, Nick and I couldn't resist dusting off our surf boards. But if you're not excited by Export to CSV feature, we have nothing to talk about. References Power Pages release plan Content management in Power Apps portals, bork-bork style. Package/solution deployer XrmToolBox Portal Record Mover Alternatives to Bootstrap Materialize Pure CSS Tailwind Migrate to Bootstrap 5 🤕 Credits Cover photos by David Cleverley and Eduardo Drapier on Unsplash Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

In today's episode (technically, last year's) episode of Refresh the Cache, George and Nick talk to Dileep Singh, Principal Program Manager Lead for Power Pages. We discuss Gimli Glider, security, and growing with the product. Acronyms casually dropped in the conversation MAU - Monthly Active Users IdP - Identity Provider References Humble Pi: When Math Goes Wrong in the Real World: Parker, Matt: 9780593084687: Amazon.com: Books Microsoft Power Pages Community - Power Platform Community Power Pages Ideas · Community (microsoft.com) Copyrights and licenses Artwork by @dreamstudioai The following music was used for this media project: Music: There It Is by Kevin MacLeod Free download: https://filmmusic.io/song/4519-there-it-is License (CC BY 4.0): https://filmmusic.io/standard-license Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude Dileep Singh @rulesrchange https://www.linkedin.com/in/rulesrchanged/

Long, long time ago, in the universe far away, Nick Doelman and Colin Vermander had a dream of making a podcast about ADX Portals, I mean Dynamics 365 Portals, I mean Power Apps portals, I mean Power Pages that would rival the entire Microsoft's media department. As often is the case, Microsoft decided to put an end to it by buying out hiring the entire population of Canada both. In this episode of Refresh the Cache we talk to Nick Doelman about his journey from a humble IT guy to MVP to a portal go-to trainer, and now chief explainer senior content developer on Microsoft docs team. Why the move, how did it change the work/life balance, what did Nick do for Canada (unlike his football team) - those are just some of the things we talk about. We talk pretty much about everything except curling. Which is a shame if you ask me. Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude Nick Doelman @readyxrm Artwork by @dreamstudioai

Daily logins are like daily gym visits: everyone says they do it every day, but reality begs to differ. Nick and George talk about new Power Pages licensing, monthly active users and more in episode 29 (or 2 in "After Nick Doelman" era). https://powerpages.microsoft.com/pricing/ https://alexacrm.com/plugin Get in touch [email protected] Nick Hayduk @Engineered_Code George Doubinski @georgedude

One of the Nicks is back but Doelman variety decided to take a pill and has gone to greener pastures of the mothership. To fill in the void of his large shoes, George "The Enabler" Doubinski has joined the crew and broken all-Canadian camaraderie. Both Nick & George are rusty after a long break, so the only hot topic of the day is "Who moved my cheese and is it still cheese?" aka "Power Pages" and "I can do Power Apps portals - do I still have a job?". Also turns out, logins are like exercise - everyone says they want to and will do it daily but in reality... Nick Hayduk @Engineered_Code George Doubinski @georgedude

The Nick's are back after a brief break to bring you the news from the Power Platform 2022 release plans for Power Apps portals. Nick Hayduk @Engineered_Code Nick Doelman @readyxrm