How to grant specific permissions to a specific columns of the entity ?

[former_member796360]

Hello community,

I am working on a CAP project.

Here is the entity property details:

And I am looking to build two interfaces for two types of roles:

- VideoManager: will have all of the permissions: 'READ' - 'WRITE' - 'UPDATE' - 'DELETE' of all the entity properties : Already done!

- VideoViewer: will have the permissions: 'READ' - 'WRITE' (except videoOnline property which will not be granted) : I am looking to build this one.

For the security of the application, I am using the XSUAA.

My question is how can I show the appropriate interface (UI5), without building different applications, to the appropriate user depending on its role?

Thank you in advance.

[OlenaT · Accepted solution]

Hi moomenmufti,

Unfortunately we don't support property level restrictions. If applicable to your use case, you can define two different views, for example VideoManagerView and VideoViewerView and exclude or set to readonly videoOnline property in the second view. Alternatively you can write a custom handler where you can regulate which property is accessible for which user https://cap.cloud.sap/docs/node.js/authentication#enforcement.

Best regards,

Olena