List view with records not displayed due to ACL restriction - bad user experiance

[Zod]

Hi Experts,

when ACLs do not allow records to be listed, a message will show up at the botton telling how many records are not displayed. Ok so far ...

BUT .. in case there are only a view records to be visible and many are not ... it could lead to misunderstanding of the records available.

Example.

> List is set to show 200 Records > Picture 1

> List set to show only 15 records per page > Picture 2

Get my point?

The user does not know how to sort to see all records ... as the logic of which records are not displayed is not transparent for him.

I would expect the system to show all visible records in line with the sorting .. and independently show the message of how many records are not displayed due to security reasons ...

Any idea how to fix this to me more user friendly?

[Zod]

"my users" are not non-roled per default ... so I definitely need s solution also working for rolled users where ACL scripting denies the access to records ..

[roehltablada]

Hi vemffm.

Create a read ACL and a query business rule for the role.

Regards,

Roehl Tablada.

[Zod]

... might be a help .. BUT .. while ACLs are quite safe a only privileged people can change them ... business rules can be manipulated by every admin ... what makes it somehow less secure due to my understanding ...

[roehltablada]

Hi vemffm.

You need both the ACL and query business rule. The limitation is based on how you design them.

Regards,

Roehl Tablada.