Pega Platform 8.8.3 - Attribute Based Access Control Different Behavior with Dataset
Pega Platform 8.8.3 - Attribute Based Access Control Different Behavior with Dataset
- First of all, I have changed EnableAttributeBasedSecurity DSS value as true in order to enable attribute based access control on pega platform. I have generated access control policy and access control policy condition rules.
Access control policy condition rule
Access control policy rule
2. It is now test the masked values on clipboard page with different approaches of fetching data.
2.1. Retrieve data through dataset.
Check tempCustAttributePg from Clipboard
Pega Platform 8.8.3 - Attribute Based Access Control Different Behavior with Dataset
- First of all, I have changed EnableAttributeBasedSecurity DSS value as true in order to enable attribute based access control on pega platform. I have generated access control policy and access control policy condition rules.
Access control policy condition rule
Access control policy rule
2. It is now test the masked values on clipboard page with different approaches of fetching data.
2.1. Retrieve data through dataset.
Check tempCustAttributePg from Clipboard
Nothing masked. Expectation is to mask tckn property value of the instance shown on screenshot above.
2.2. Retrieve data through data page or obj-browse. If we have a look at the TCKN property value, we clearly see the masked value which is expected.
Why the TCKN values are not masked when we bring the data on clipboard page through data set run? We expect same behavior which is masking values regardless of the fetching mechanism.
Note: There is no sensitive data in the screenshoots shared in this document as they are all sample data.
Accepted Solution
Pegasystems Inc.
GB
@m.caldag As mentioned in INC-B26955 which has now been resolved: this issue is due to lack of feature.
Masking occurs at the UI layer, meaning we can't control hiding values from the Clipboard. However encryption takes place at the DB layer, allowing to control to hide encrypted values from the Clipboard. That is why the advise is to implement both masking and encryption for added security. ABAC is not supported for Activity with Dataset-Execute. Additionally please note that normally ordinary users should not have access to the Clipboard functionality.
Masking of properties from Dataset Execute is not implemented in the product. We have raised the Feedback item FDBK-119690. You can follow up with you Account/ CSM team for further update on the feature implementation.
Bentego
TR
@MarijeSchillern INC-B26955
Accepted Solution
Pegasystems Inc.
GB
@m.caldag As mentioned in INC-B26955 which has now been resolved: this issue is due to lack of feature.
Masking occurs at the UI layer, meaning we can't control hiding values from the Clipboard. However encryption takes place at the DB layer, allowing to control to hide encrypted values from the Clipboard. That is why the advise is to implement both masking and encryption for added security. ABAC is not supported for Activity with Dataset-Execute. Additionally please note that normally ordinary users should not have access to the Clipboard functionality.
Masking of properties from Dataset Execute is not implemented in the product. We have raised the Feedback item FDBK-119690. You can follow up with you Account/ CSM team for further update on the feature implementation.