Making all values available to Admins and Managers

If all of the data is not connected to the section access table, the unconnected data will be removed by the reduction process – even for * connected users. The Star is a wildcard that allows the user to be connected to all of the data, but it is not considered for the reduction.

This is not so much of a problem if the security model is fairly static. But if the model is dynamic, then we need to be able to make sure that a user who needs to see all of the data can see it.

Getting ready

Load the following script:

Section Access;
Access:
LOAD * INLINE [
    ACCESS, USERID, PASSWORD, LINK
    ADMIN, admin, admin, *
    USER, manager1, manager1, ALL
    USER, user1, user1, US
    USER, user2, user2, UK
    USER, user3, user3, FR
];

Section Application;
Sales:
Load * Inline [
    CountryCode, Country, Sales
    US, USA, 1000
    UK, United Kingdom, 800
    FR, France, 750
    DE, Germany, 940
];

LinkTable:
Load Distinct
  Upper(CountryCode) as...