How to disable filter criteria editing for specific roles in advance find?

(0) Share

Report

Posted on by Community Member

Hello Experts,

We need to disable the filter criteria feature in advance find for few users so that they cannot remove the standard filters and get access to data not meant for them. Is there any privilege in security role to do that? I have tried removing the update privilege on 'Views' and 'Saved Views' entries in security roles but that didnt work. Any idea please?

82018.Capture.PNG

Thanks.

*This post is locked for comments

I have the same question (0)

All responses (6)

Answers (1)

Sort by

Suggested answer

ashlega 34,477 on at

Like (0)

Report
Copy link

Link copied!

Hi,

I don't think you can control filtering through security. Your users might not be able to create/update their personal views, but they will still be able to use advanced find.

Technically, you should control access to records/fields by configuring security on the entities (not on the advanced find).

Was this reply helpful? Yes No
Suggested answer

RaviKashyap 55,410 Moderator on at

Like (0)

Report
Copy link

Link copied!

There is no supported way to customize the advance find or implement security only on advance find.

If you are concerned about the data visibility to users, you could use field level security. This way even if they filter the records, they won't be able to actually see anything.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

Hi Alex,

Thanks for the response. We have tried to fit this into security role model by giving only read privilege of org level on this entity because user should be able to view all records of the entity. But as filter suggests users should be able to view only parent records of this entity and not the child ones(which is optionset on the form). So we have given this filter criteria in all our system views but advance find view is editable so the concern.

Thanks,

Sanchita

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

Hi Ravi,

Thanks for confirming that advance find filters cannot be controlled with privileges. Field level security can be used here but not sure if thats the ideal way as in that case we need to enable field level security for all the attributes of the form and add them up in the field level security profile. If the profile didn't get maintain for old/new users over the time then again data security is at stake.

Any other approach for such requirements where we need to show records of others ownership but only the parent ones?

We want to avoid Retrieve and Retrieve Multiple plugin.

Thanks,

Sanchita

Was this reply helpful? Yes No
Verified answer

ashlega 34,477 on at

Like (0)

Report
Copy link

Link copied!

Well.. if that entity is user-owned, you might try controlling access through team membership. Either assign those records to a team and add users to the team(may have two teams for parent and child records), or use sharing(again, might use teams - access teams, maybe..system.. or manual)

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

Thanks Alex. Yes that's possible but will need lot of maintenance.

Was this reply helpful? Yes No