BUG: Tenant Protection Rules - Combo Query

4xjbh

This may be fixed in current version. I hope the instructions are OK

With tenant protection rules on both BO's the values for the category list are available to all tenants from a Category Combo in Company where the combo values are created from a query within the control.

BSV file is attached

BO: Company
BO: CompanyCategoryList

Create 2 tenants (tenant1 & tenant2)
Create 2 contacts (user1 & user2)

Create 3 Categories linked to tenant1 (Category1, Category2, Category3)

Create 1 Company and assign Category 1 and tenant1

Login as tenant2 and create a company and the 3 tenant 1 values are in the control. A Search of the company and category BO do not find any records when logged in as tenant2.

4xjbh

Hmmmm. File wont attached

customaware

zip it

4xjbh

Business Space file attached

category.zip

39.31kB

category.zip

39.31kB

4xjbh

I had a response from support on this and thought I would share.

If a custom query is used as part of a dynamic choices list the protection rules of the BO's do not take effect on the results. You need to use a relationship model attribute not plain text (Recommended) or amend the query to filter out other tenant information (not recommended by support)

I believed that the data protection on the BO's were 'GOD' and controlled all query data but apparently this is not the case.

BenHayat

4xjbh wrote
I believed that the data protection on the BO's were 'GOD' and controlled all query data but apparently this is not the case.

Based on my experience Aware's data protection works very well on a well and properly designed data model.