Restricting filter data retrieval by user permissions
The Get Data As filter property allows you to specify the permissions that a filter uses for certain operations. Prior to the introduction of this property, all filters in BMC Remedy AR System server always executed with the permissions of an administrator. In other words, by default, filters can read and write any field in any request, regardless of the permissions on the field or on the request.
When set to User, the Get Data As property supports applications that use row-level security and dynamic groups for access control. This property enables a filter to adopt the permissions of the user that caused the filter to be called when retrieving the data upon which the filter acts. A filter with this property configured for user permissions can still write to any field on any request appropriate to the operation, but can only retrieve entries and fields that are visible to the user that caused the filter to be executed.
The Get Data As filter property has these values:
- Server — Run the filter with the permissions of the Administrator. This is the default setting.
- User — Run the filter with the permissions of the user that called the filter.
For example, suppose there are two groups with data on a single form that contains salaries for different job levels. Each group should not be aware of the other group's data. In this case, row-level security might be used to identify the records within the form that each group can access.
Without the Get Data As property set to User, a filter cannot avoid accessing all records in the form that match the qualifications in the filter, so it manipulates information for both groups indiscriminately. Operations that should be performed only on records for one group must have additional qualifications to restrict the data, and those additional qualifications must be revisited each time permissions on any element of the form are changed.
With Get Data As set to User, filter operations can be restricted to retrieving only information visible to the groups whose user executed the filter. This is the case regardless of changes made to the form after the filter has been created.
To configure a filter to get data with the permissions of the user
- In BMC Remedy Developer Studio, create the filter or open an existing filter in the editor.
- In the Properties tab, expand the Data Access section, and then click the down-arrow in the Value column.
- Set the value to User.
- Save the filter.
For more information, see the following topics: