Hide data rows

English Forum
1

Dear Community

does anyone know if it is possible to hide certain data rows from users.
My first approach is, that I configure a many to many relationship named “editors” between my data table and the user table.
Afterwards I configured a table selector which says select only those rows where the logged in users ID is equal to the configured editors field.
Works pretty good.

When I now click on the edit link on a row I will get an URL somthing like the following: “https://fqdn/admin/630t0zis3fg/popups/7ojym6t77vj/filterbytk/1”
When I now change the last character manually from 1 to 2 the user can edit another dataset (with id=2)

Thats not good nor secure.

Does anyone has a solution on how to avoid this?

Many thanks
Chris

2

The most secure way is to configure the data-source permissions, go to “action permissions” and specify there a custom scope if that’s technically possible for your requirements.

Additionally, you can use snowflake, UUID or Nano ID instead of integers for ID column to have much more complicated IDs for guessing - not filterbytk/1 but something like filterbytk/45fgut674ru.

3

Hy IlyaB

Many Thanks. That was the perfect solution :smiley:

Cheers
Chris