Hi Andrew
Woops... got the suggested query a bit wrong for what you want.
What you'd need to do is grab the Group List from the user record to a temp
DO field (tmpGroupList), then parse the contents of the 'Assignee Group'
field to get the list of groupIds, and construct a query like:
('tmpGroupList' LIKE "%73404%" AND 'tmpGroupList' LIKE "%73405%") etc.
Then, set that to the Advanced Search Bar field.
HTH
David Sanders
Remedy Solution Architect
Enterprise Service Suite @ Work
==========================
ARS List Award Winner 2005
Best 3rd party Remedy Application
See the ESS Concepts Guide
tel +44 1494 468980
mobile +44 7710 377761
email [EMAIL PROTECTED]
web http://www.westoverconsulting.co.uk
-----Original Message-----
From: David Sanders [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 25, 2007 8:10 AM
To: '[email protected]'
Subject: RE: filter privilege escalation?
Hi Andrew
If you have the 'Allow Multiple Assignee Groups' setting enabled on your
server and row level access defined for a form using the Assignee Group
field (112), the SQL generated by ARS contains clauses like the following:
((T201.C112 LIKE '%;''fred";%'') OR ((T201.C112 LIKE '%;0;%') OR ((T201.C112
LIKE '%;73421;%') OR ((T201.C112 LIKE '%;73419;%') OR ((T201.C112 LIKE
'%;73404;%') OR (T201.C112 LIKE '%;73401;%'))))))
That is, the server constructs a series of LIKE statements for each group
that the user is a member of (with OR between so the user only needs to be a
member of one matching group to access the record. What you want is a
similar clause where the Ors are replaced with ANDs so the user must be a
member of all groups specified in 112.
You can't do this through normal row level access, but I wonder if you can
not use row level access, but construct a similar query on the fly to add to
whatever the user query is. ('Assignee Group' LIKE "%;73404;%" AND 'Assignee
Group' LIKE "%;73405;%" etc.) I haven't tried this myself.
What you'd need to do is have workflow to grab and parse the group list from
the user record. Then construct the qualification you need, then set this to
the advanced search bar field 1005 (that you'd need to add to your forms).
Put this workflow in a guide, and run it whenever a query is performed.
You'd also need something similar for table fields to construct a suitable
EXTERNAL qualification.
As I said, I haven't tried this approach and don't know what the performance
overhead would be, but it sounds better that creating groups on the fly.
HTH
David Sanders
Remedy Solution Architect
Enterprise Service Suite @ Work
==========================
ARS List Award Winner 2005
Best 3rd party Remedy Application
See the ESS Concepts Guide
tel +44 1494 468980
mobile +44 7710 377761
email [EMAIL PROTECTED]
web http://www.westoverconsulting.co.uk
_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the
Answers Are"
