Record Level Security

[ebrandt]

In FM you could use a calculation to define record level access. ex:
RepID = 123 (Per Table)

This way it was easy to implement security without a lot of coding using the same forms. Administering FM solutions with multiple tables was a nightmare due to their data model, but that was one nice feature when having 100's of users.

With servoy I was hoping to implement record level security as well, using the same forms, allowing indivduals only access to their records.

I am sure this is possible using methods, but I was really hoping to avoid multiple methods passing variables from form to form. Can someone provide me with some direction as to the easiest way to accomplish this.
I will have local users / terminal server clients and wide area users.

[automazione]

If I'm not wrong you probably are looking for addFoundSetFilterParam . Is a form function that adds a PERMANENT filter to a foundset.

//Add a filter parameter to limit the foundset permanently
var success = controller.addFoundSetFilterParam('customerid', '=', 'BLONP');//possible to add multiple
controller.loadAllRecords();//to make param(s) effective

[ebrandt]

Excellent,
Thank you for your help!

[ebrandt]

Would it be possible to apply a method to a security group? Would this not be an effective alternative parameter , possibly offering more robust security administration?

[bcusick]

You can already GET the name of the current group via a method - so you could execute whatever method you want in response.

Also, a slight clarification:

...controller.addFoundSetFilterParam is a form function that adds a PERMANENT filter to a foundset.

This is true only for a particular SESSION. If the user quits Servoy or closes the solution, the FoundSetFilterParam is reset to nothing.

Hope this helps,

Bob Cusick

[ebrandt]

Perfect,

muchas gracias