Users view all records but can only edit records they created.

Hello, I am try to create security in which if a users can view all records created but only edit records that they have created.  I am fairly new to Mendix and this is our first project, so would like to see if someone could help. Thanks Gio
1 answers

Hello Gio,

You need to:

1) Record ownership (on the domain modeler open you entity and tick Store 'owner')

2) Create access rules for read all attributes for your user role 

3) Create access rules for read/write required attributes for your user role and within the Xpath Constraint tab click "Owner" (you can also type in manually "[System.owner='[%CurrentUser%]']")

After you've completed the above steps, you should have the first rule allowing users to read all objects, and the second rule covering edit rights over owned objects.

Hope this helps