Filter on Section Access - Is this a Security bug?
Hi
I have implemented security in a doc through section access and it works fine.
Additionally there's an OnOpen action that locks a certain field - DEPT - and that works fine as well.
Together both validate the users and selects the data accordingly.
The problem is that it's a perfect solution when it runs locally but when the document is accessed on the server no matter the user level and DEPT the locked record is always the SWI record which happens to be the ADMIN profile with access to all the records in the document.
Can anyone explain why this happens?
Please check the attached demo - all datafiles included (ADMIN User and Pass is "SWI"). The others you may check on the sql_users.csv and sql_access.csv files
