Global filter can be removed without permission

Support
#1

Hello,

I’ve got a Jmix app that I noticed the global default filter configuration keeps getting removed. I tested with a role that does not have access to ui.filter.modifyGlobalConfiguration as specified in the documentation, and was able to easily remove the configuration by clicking the Remove option:

image

We’re expecting all values in this menu to be disabled for global default configurations when the security role doesn’t grant access to ui.filter.modifyGlobalConfiguration. Is this expected behavior, or a bug?

Thanks,
Adam

#3

Hello,

I’m still looking for a solution to this issue. Please address this post.

Thank you,
Adam

#4

Hi Adam,

This problem is on our to-do list. We’ll reply as soon as we investigate it.

A quick solution for you would be ensuring the user has no right to remove the FilterConfiguration entity.

Regards,
Konstantin

#5

Hi,

Thank you for reporting the problem, I’ve created a GitHub issue. It’ll be fixed in the upcoming release.

Gleb

#7

Thank you. This will work as a temporary fix.

Thank you for the confirmation.

Adam