For confidentiality reasons, my client wanted security filters to avoid people being able to see records associated with certain vendors.
To do this we applied security filters to the various tables based on the Vendor Posting Group - see extract from permissions below.
| Type |
Object Type |
Object ID |
Object Name |
Read Permission |
Insert Permission |
Modify Permission |
Delete Permission |
Security Filter |
| Include |
Table Data |
23 |
Vendor |
Yes |
Yes |
Yes |
Yes |
Vendor: Vendor Posting Group=<>VND-SCD&<>VND-FGT |
| Include |
Table Data |
25 |
Vendor Ledger Entry |
Yes |
Yes |
Yes |
Yes |
Vendor Ledger Entry: Vendor Posting Group=<>VND-SCD&<>VND-FGT |
| Include |
Table Data |
38 |
Purchase Header |
Yes |
Yes |
Yes |
Yes |
Purchase Header: Vendor Posting Group=<>VND-SCD&<>VND-FGT |
| Include |
Table Data |
39 |
Purchase Line |
Yes |
Yes |
Yes |
Yes |
Purchase Line: Posting Group=<>VND-FGT&<>VND-SCD |
| Include |
Table Data |
122 |
Purch. Inv. Header |
Yes |
Yes |
Yes |
Yes |
Purch. Inv. Header: Vendor Posting Group=<>VND-SCD&<>VND-FGT |
| Include |
Table Data |
123 |
Purch. Inv. Line |
Yes |
Yes |
Yes |
Yes |
Purch. Inv. Line: Posting Group=<>VND-SCD&<>VND-FGT |
| Include |
Table Data |
380 |
Detailed Vendor Ledg. Entry |
Yes |
Yes |
Yes |
Yes |
Detailed Vendor Ledg. Entry: Vendor Posting Group=<>VND-SCD&<>VND-FGT |
Unfortunately this does not appear to be working as we expect as users are sporadically getting error messages when trying to review data in those tables - ie, sometimes looking at purchase invoices/posted purchase invoices is fine and other times they get an error saying a security filter has been applied, when the record in question isn't part of the filter. Sometimes they are unable to even open entire lists - for example a user today couldn't view General Ledger entries at all due to the filter on Purch Inv Header table.
Am I missing something here - I thought the whole point of Security Filters was to allow access to the tables, filtering out the restricted records. Is there something wrong in my permission setup?
Any guidance gratefully received.