AnsweredAssumed Answered

$$MergeField Variable security Question

Question asked by wedgeman on Jan 18, 2018
Latest reply on Jan 18, 2018 by coherentkris

is there any known issue with using global merge fields on displays, showing data which the user's privilegesetname would otherwise NOT have access to?

 

For example a layout in Table "X".. User Susy with privilegesetname "secretary" doesn't have access to Table "Payroll", but if a global were run for Susy which created variable $$currenthours, which is then displayed on a user layout to which Susy can see..

 

I know there is discussion of accessing fields using other methods; is there any such method of circumventing access barriers, to where someone could ascertain the variable name $$currenthours (assuming of course that person doens't have any higher/admin rights or layout editing rights?

Outcomes