SimpleRecordSecure
This server class provides methods to operate the database records considering the ACL rules of the user. All of the SimpleRecordSecure methods are the same as SimpleRecord methods but they are applied according to the ACL rules.
If a user attempts to perform one of the Create, Write, or Delete operations in the database to a record they have no access to, the operation is not completed, the method getErrors() called after the operation returns the corresponding error.
If a user attempts to perform a Read operation in the database to a record they have no access to, the data is not provided, the method getErrors() called after the operation does not return any errors.
The system response to the actions prohibited by the ACL
| Prohibited action | Prohibition for the record | Prohibition for the field |
|---|---|---|
| Create | If a user adds a record via a script and uses the insert() method, the record is not created. | If a user fills in the field via a script and uses the insert() method, the record is added with an empty field or default value for the field if there is any. |
| Write | If a user adds new value for the record fields via a script with the update() method, the record is not updated. If updateMultiple() is called, the records prohibited for changes are ignored, the rest are updated. | If a user adds new value for the field via a script with the update() / updateMultiple() method , the record is updated but the values of the fields prohibited for changes remain the same. |
| Read | If a user requests a record via a script, the response does not include the hidden data. The element is not included in the response. | If a user requests a field data via a script, the response does not contain the hidden data. The column with the prohibited field is empty. |
| Delete | If a user deletes a record via a script with the deleteRecord() method, the record is not deleted. If deleteMultiple() is called and the deletion of at least one of the records from the array is prohibited, none of the records are deleted. | - |