Maximo Open Forum

Hi, 

I am trying to limit the amount of standard services (WPSERVICE.ITEMNUM) that a security group sees in the WOTRACK application. To achieve this, I am thinking of setting an WPSERVICE Data Restriction on the intended security group. My restriction type is set to 'QUALIFIED' and my condition is as follows:

itemnum = '1001'

The intended sec group still has access to all the standard services. What is odd is that I have a custom app on Main Object POLINE, and the exact same condition is able to only show POs with the service item mentioned above. Could anyone assist?

Qualified data restrictions only work for main objects. In your example, since you were in WOTRACK, that would be WORKORDER for example. I'm sure we have this in documentation in other places but if you open the field help on the type field of the data restriction you'll see where we clarify this limitation.

 "Type of restriction being configured. Valid types are Hidden, Required, Read-only and Qualified. Qualified means that only data meeting the condition is 'qualified' to be fetched from the database and can only be applied to top-level objects (not child objects or attributes)."

You could use one of the other types (such as HIDDEN) to obscure the data without hiding it. Or you would need to achieve this in some other way. For example, on a table control there is the Application Restrictions on the Advanced tab. This is an additional where clause that gets appended that can't be seen or modified by the user. You could either create two tabs (one for admins that have no restrictions and one for the users that are restricted) where you have the restriction only on one tab or you could write in your condition that looks to see if the user is in one of the groups that you want the restriction to apply to. 

Hello @Steven Shull,

I tried data restriction on child objects like MRLINE in CREATEDR application, and the restriction is working fine, but not working for example on INVUSELINE. Any explanation for that ? Thank you!