7.1: Client-side security model

[former_member233977]

Hello, dear experts!

My question is related to Mobile 7.1. Assume that device is shared between several users and each user should see only his objects. For example each user should see only service orders of his workcenter.

Are there some changes/improvements in Mobile 7.1 comparing to MI 7.0 "User-dependent Data Filtering Service"? Shold we use the same API as in MI 7.0?

Kind regards,

Anton.

[Former Member · Accepted solution]

Hi,

I think you misunderstood the actual functionality.

User dependent data filtering service available in MI 7.0 is still available with MI 7.1.

To be clear, lemme explain in detail.

There are two stages of data filtering. One is to filter the data/content coming from the middleware(MI 7.0 or MI 7.1) to the device based on the user who syncrhonizes on the device. But in your case there are multiple users who are actually using the same device. But the assumption/prequisite is only one user will be using the device at any point of time and so, only one user will be doing a sync at any one point of time. So based on who ever user who is doing a sync, he will be only getting data based on whatever filtering criteria you are mainting on middleware(either be MI 7.0 or MI 7.1).

And remember, even though two/more users are using the same application on a single device, there will be a user specific attribute stored in the tables of data objects. So based on the login user, he will be only able to access the data which belongs to him. This security is already taken care. So only those data which belongs to the user will be avaialble to them. And one more thing to remember is even thought if mulitple users are having same single data set on the middleware, there will be multiple sets available on the client for each speparate user who are actually using the device.

And now coming to your actual question, earlier in MI 7.0 you were using "User dependent filtering service" but whereas in MI 7.1 there are actually various ways of fitlering data. For that you can actually check the distribution model documentation available with MI 7.1 and one of them is user dependent filtering sevice.

Now coming to your other question, "For example each user should see only service orders of his workcenter", be it MI 7.0 or MI 7.1 - if you filter data based on user's workcenter on the middlware itself, then based on who ever user syncs he will only get data that belongs to his workcenter. And as i said earlier, there will be multiple sets of data available with local client which is equal to the number of users on the device, but at any point of time based on the logon user, only his data will be available to him.

The last option is - if you are downloading the entire data on to the client without filtering anything on the middleware, (and remember this will be a huge data set for which device memory may not be sufficient and not at all recommended to this) then you have to code in your application as to which data belongs to what users. But this is not recomended because it will have impact on application's performance because of the filtering on the device which happens on every screen that you will be loading.

Best option would be to filter as much as possible on middleware, so that each user gets only data which belongs to him.

Thanks & Best Regards,

Siva.