I'm trying to think of a "good" way to implement field-value security. As a simple example: Jim and Bill both work in shipping, using the same screens/fields, but each works at a different plant. Jim can only ship orders assigned to plant #1, while Bill is restricted to plant #2's orders.
How should/could this sort of field-value security be implemented?
Ideally, any required data filtering would be done as part of the fetch's SQL so it doesn't return too much, only to be quickly discarded.
Yes, but as I said, that was a simple example. A more representative example would be:
( (division = 1) and ( (location = 3) or (sales-rep = RK) ) )
The specific criteria would/could be different for each logical process of each role.
Copyright (c) Marimer LLC