not sure if the logic of the calendar changed…
user has only 1 record in the calendar table.
record security:
the crud forms are showing the single users record correctly, but on the calendar, its displaying everyone else’s records as well. it is even allowing the user to delete and edit the other records. these 2 users are not related or parents to each other…
looks like in this routine it selects all both account records, but these 2 accounts are not related at all, why is it selecting all the accounts, if the security is sent for userid only…
in the User ID subquery getUserIDSubquery(DbField fld, DbField masterfld):
$filter = UserId IN (1000111, 100130)
then in userIdFiltering(string filter)
filter = UserId IN (1000111, 100130) which is incorrect should only be 1000111
even if i set $filter = CurrentUserID() - all the records are still returned
not sure why its selecting all the records…