Is it possible to filter a delegated data type rule?
Hi All,
I have a requirement to enable delegation on a data type but this data type contains a lot more records than we'd like to give to the business. Is it remotely possible to pre-filter the delegated rule so that we only show the business the records that we want to allow them to change?
BTW we are running 8.6.2.
Thanks Craig
ING Nederland
NL
@CraigA52 If you are looking for restrictions on read and update operations on the records/instances that user is allowed to.
We can achieve it by implementing ABAC rules for the class that is delegated. Create Access Control Policy and Access Control Policy Conditions for Read and Update. Define Access When rules per requirement and configure them on the Access Control Policy Condition.
Virgin Media
GB
@KC_Janga Thanks for that but how does that help? I don't what the business to be able to see any other data other than the records we would want to allow them to change.
Thanks Craig
ING Nederland
NL
@CraigA52 It works as below.
Lets say we have a persona A who works for Team A, and we want to restrict to display the certain records related only.
We can define a column to configure Persona/have a flag CanBusinessAccess in the delegated table and use it to check against the logged in operator's persona and grant Read/Update access to the data instances using the Access Control Policy Conditions.
This can be extended to any other fields available on the operator record like AG/WG(Teams)/Skill or use a configurable table to configure the operator's access and use it in the ABAC through a data page.