Question
Evonsys
CA
Last activity: 21 May 2025 8:57 EDT
Filters not working for users access grp but working fine with dev access grp
Hi ,
i have a non optimize code table in a section and only "Allow filters" is enabled but not "Allow column sorting". on the UI when i login with dev access grp i am able to apply filters properly but with End users access grp i am getting SRVE0295E/403 forbidden console errors when trying to apply filters. when i enable "Allow column sorting" or "pyBlockUnregisteredRequests" when condition to false, from end user access grp able to apply filters. looking for an explanation on this behavior. Thanks.
Accepted Solution
Updated: 21 May 2025 8:57 EDT
Capgemini
FR
@Prudhvi.Athapu Here is an explanation of your issue
The filter functionality in your non-optimized code table isn't registered in the BAC Security Registry. This triggers SECU0019 warnings and 403 Forbidden errors for end users. Dev Access Groups typically have elevated privileges (e.g., pyStandardUpdate), bypassing BAC checks. End User Access Groups follow stricter security policies, enforcing BAC validations.
Why Enabling Sorting/Disabling BAC Fixes It
Allow Column Sorting: Automatically registers the component in BAC during column configuration. pyBlockUnregisteredRequests = false: Disables BAC validation entirely (not recommended for production) BAC stands Basic Access Control
Tata Consultancy Services
IN
Do you see any errors relating to 'Unauthorized request detected : Unregistered request encountered'?
Updated: 19 May 2025 8:55 EDT
Evonsys
CA
@Gayatri Nistala yes, i see SRVE0295E in browser console and below security alert logs: Unregistered request encountered with params pyActivity:ReloadSection eventSrcSection:<MISSING> PreActivity:pzdoGridAction* Unregistered request encountered with params pyActivity:ReloadSection eventSrcSection:<MISSING> PreActivity:pzdoGridAction PreDataTransform:* Unregistered request encountered with params pyActivity:ReloadSection eventSrcSection:Pega-ColumnFilterCriteria.pyUniqueValuesGrid PreActivity:pzdoGridAction* Unregistered request encountered with params pyActivity:ReloadSection eventSrcSection:Pega-ColumnFilterCriteria.pyUniqueValuesGrid PreActivity:pzdoGridAction PreDataTransform:
Accepted Solution
Updated: 21 May 2025 8:57 EDT
Capgemini
FR
@Prudhvi.Athapu Here is an explanation of your issue
The filter functionality in your non-optimized code table isn't registered in the BAC Security Registry. This triggers SECU0019 warnings and 403 Forbidden errors for end users. Dev Access Groups typically have elevated privileges (e.g., pyStandardUpdate), bypassing BAC checks. End User Access Groups follow stricter security policies, enforcing BAC validations.
Why Enabling Sorting/Disabling BAC Fixes It
Allow Column Sorting: Automatically registers the component in BAC during column configuration. pyBlockUnregisteredRequests = false: Disables BAC validation entirely (not recommended for production) BAC stands Basic Access Control