Business Issue:
When a user logs in to the SSP, they can see tickets that have been raised for their them as an individual and their Customer Account which is the desired behaviour and working as expected. They have the ability to report on and export data which is also working. They also have the ability to create filters on the data presented and this is where the issue resides. If they use the "Location" field of the "Asset" / "CI" in the filter, the input field asks for the user to start typing and then shows any locations that have that character or value even if it is not associated with their Customer Account.
The images below show the query being built and then showing "Damian" which is a test address not associated with the Customer
Expected outcome
The user needs to be able to filter on the location field, but I need to create logic such as a Business Rule / UI Policy / Data Policy that ensures only the locations associated with the Customer Account / User Logged in are displayed.
