9.6119.0 - Related data field for dynamic content type - no security trimming - Bugs & Issues - Bugs & Issues - Progress Community

9.6119.0 - Related data field for dynamic content type - no security trimming

 Bugs & Issues

9.6119.0 - Related data field for dynamic content type - no security trimming

  • 9.6119.0 - Related data field for dynamic content type - no security trimming
  • When I create a content type and restrict its permissions (view, create, etc) to a certain role, or set of roles, users not in those roles can still see all of them. Also,  since the related data field is pulling from an api, this seems like a bad security hole. There's nothing preventing users from making those api calls themselves.