public List<Invoice> getInvoices(LocalDate dateFrom, LocalDate dateTo) {
return dataManager.load(Invoice.class)
.query("e.dateTime >= ?1 and e.dateTime <= ?2",
dateFrom.atStartOfDay(),
dateTo.atTime(LocalTime.MAX))
.list();
}
When jmix.authserver.client.myclient.resource-roles = rest-minimal
rest client get empty list and one line in log:
io.jmix.core.AccessLogger : Denied access to [entity 'x_Invoice' create, read, update, delete] for user [my-client] by io.jmix.securitydata.constraint.CrudEntityConstraint
When I add to jmix.authserver.client.myclient.resource-roles
resource role with read access to entity and read access to all its attributes (source = database, scope = API), rest-client get list of entities with all them attributes values.
But there is one line per any returned list element in log:
io.jmix.core.AccessLogger : Denied access to [x_Invoice: not imported = [dateTime, num, supplier, sum, id, ... ]] for user [my-client] by io.jmix.security.constraint.ExportImportEntityConstraint
Whats wrong ?