I have masked variables on my catalog item.
I assigned the fulfiller group who will work these RITMs the catalog_view_masked role.
My concern is that if I impersonate a user who does NOT have the catalog_view_masked role, they have the HIDE/SHOW buttons and are able to unmask.
It was my understanding that only users with that role have the SHOW/HIDE button. Am I perhaps missing something?
Thanks in advance.
