question List view with records not displayed due to ACL restriction - bad user experiance in Developer forum

List view with records not displayed due to ACL restriction - bad user experiance

Zod — Thu, 25 Jan 2018 22:03:31 GMT

Hi Experts,

when ACLs do not allow records to be listed, a message will show up at the botton telling how many records are not displayed. Ok so far ...

BUT .. in case there are only a view records to be visible and many are not ... it could lead to misunderstanding of the records available.

Example.

> List is set to show 200 Records > Picture 1

> List set to show only 15 records per page > Picture 2

Get my point?

The user does not know how to sort to see all records ... as the logic of which records are not displayed is not transparent for him.

I would expect the system to show all visible records in line with the sorting .. and independently show the message of how many records are not displayed due to security reasons ...

Any idea how to fix this to me more user friendly?

Re: List view with records not displayed due to ACL restriction - bad user experiance

John Diaz — Thu, 25 Jan 2018 22:13:17 GMT

Thank you for asking this. I've been wondering this for a LONG time. Really curious to see if anyone has gotten around this.

Possibly a query business rule instead of ACL? Seems counter productive though...

Re: List view with records not displayed due to ACL restriction - bad user experiance

darlawolf — Fri, 26 Jan 2018 03:31:55 GMT

You will need to modify the OOB before query Business Rule below (my recommendation is to turn the OOB off and create a new one) to incorporate the changes done on the ACL side.

Re: List view with records not displayed due to ACL restriction - bad user experiance

Zod — Fri, 26 Jan 2018 08:17:01 GMT

.. this would give a new message, but still not show all visible records at once ... at least I would not see why this should change due to the code provided.

Re: List view with records not displayed due to ACL restriction - bad user experiance

darlawolf — Fri, 26 Jan 2018 08:21:41 GMT

If you impersonate a non-roled user and go to incident.list they do not get a Security constraint message. This is due to the OOB business rule above. Just sharing what I have done for other clients whenever they want extensive ACLs I also include a before query BR to hide that security constraint message.

Re: List view with records not displayed due to ACL restriction - bad user experiance

Zod — Fri, 26 Jan 2018 08:24:13 GMT

"my users" are not non-roled per default ... so I definitely need s solution also working for rolled users where ACL scripting denies the access to records ..

Re: List view with records not displayed due to ACL restriction - bad user experiance

roehltablada — Fri, 26 Jan 2018 08:39:45 GMT

Hi vemffm.

Create a read ACL and a query business rule for the role.

Regards,

Roehl Tablada.

Re: List view with records not displayed due to ACL restriction - bad user experiance

Zod — Fri, 26 Jan 2018 12:23:29 GMT

... might be a help .. BUT .. while ACLs are quite safe a only privileged people can change them ... business rules can be manipulated by every admin ... what makes it somehow less secure due to my understanding ...

Re: List view with records not displayed due to ACL restriction - bad user experiance

roehltablada — Fri, 26 Jan 2018 12:28:40 GMT

Hi vemffm.

You need both the ACL and query business rule. The limitation is based on how you design them.

Regards,

Roehl Tablada.