ServicePortal, Data Table from URL Definition Widget doesn't take the ACL Filters

[Ruihster]

Good Day, I hope I've got the appropriate Forum for my question.

We use the CSM Service Portal with Case Management on our Instance.

When a customer logs into the CSM Portal, he has a Page where he can see all his Cases. This Page uses the "Data Table from URL Definition" Widget.

In the Widget aren't and in the URL aren't any Filters defined, but when the Customer opens the Page the Cases are filtered and he can only see the Cases where he is defined as contact in the contact field.

Now I want to achieve this filter system in a new Page with a different Table. Therefor I've created a new Page for the Change Request Table. I used the Service Portal Designer and Page Editor, added the Widgets, defined the Widget Instances and tested the Page, as a result the Customer can see the List of Change Requests.

I've created a read ACL on the Change Request Table for the Customer, it has a Script Condition which uses the CSM Utils Script Include to look the Accounts/Companies of the User to give Read access to all Records with the Company of the Customer.

Now the problem is, the list want's to load all Records, because the Customer only see his Records there is the message: " rows removed by security constraints". My goal is to only show the Records of his Company.

I already tried to add Filters in the Widget and URL, that works, but because the customer is allowed to change the Filters, he could remove the company filter.

As far as I know it should be possible to use the ACL Script to create a Filter which can't be edited by the Customer, like an "Hidden" filter. So like on the List it's showing "All" in the filter but the customer only sees his Records without the "rows removed" message.

Does someone know how I can achieve that ?

I'd appreciate any answers.

Thanks.

[Swapnil24 · Accepted solution]

Hi @Ruihster ,

Have you tried using a display business rule to query for the data? It does a few thing for you:
1. Filters the data as you like

2. Since the filter is scripted it does not show up as an actual filter on the UI, so users cannot edit it
3. Does not display the message "Rows removed due to security constraints" like when you use an ACL.

Hope this helps or guides you in the right direction.

Thank you,

Swapnil Deo

[Ruihster]

Thank you so much for your answer.

I've already created a Business Rule but had the wrong Table selected in it, idk how so I thought it didn't worked with it. I fixed that and now it's working like you wrote.

Thank you so much 😀

[Ashu_8871]

Are you guys talking about Query BRs or Display BR?