Cannot see lists in custom workspace // roles restrictions not working at all

[Luca Michalczyk]

Hello people 🙂 

i created a new workspace experience using the App Engine Studio. While doing so, all tables i selected where inserted into list components which is used to navigate between the list views of the inserted tables. So far so good.

In order to implement a role concept for my new application, i created a role which should be able to only read all lists, entries etc. 

After using the guided creation of a new role in AES, i configured the role to only have a 'read'-permissions for all the tables i created in AES / that are visible in the new workspace. But when i am impersonating as someone who can has the new role, the list-navigation and the list view used to display the list of entires of a table does not load.

I searched for a while and found a hotfix which told me to create new records for the table 'List Applicabilites' or 'sys_ux_applicability_m2m'. 

This enabled the person whom i was impersonating as to see all lists they should see. 

The problem is that after enabling the role to see all the lists, the role was also able to perfom create, write and delete operations on said tables. According to the definition in AES the role is only supposed to be able to read them.

Are you experiencing similiar problems or did someone of you found a solution?

Thanks in advance! 

[WORKFLOW-COWBOY]

Hi Luca - what version of App Engine Studio are you on? Earlier versions were not adding the 'canvas_user' to people and that was causing this type of behavior.  You may want to confirm that your new role contains that role and that the user has it as well. 

[WORKFLOW-COWBOY]

Looks like you fixed the above issue about not seeing the lists. 

Regarding the ACLs, have you opened the app in Dev Studio to see what ACLs were created? 

Also, please note the App Engine Studio version if you can.  Thanks!

[Luca Michalczyk]

Thanks for the overall idea to look up the app in the studio. i will sure use this in the future.

Unfortunately i added my new created role to every role that is handling the read opeartion of my app tables and the ones used to restrict the access to the workspace. Again, nothing changed.

[Luca Michalczyk]

Thanks for your response.

I am not sure about my version since im not quite sure about how to look it up but i allready have added the the 'canvas-user'-role to my test user but nothing changed