ABAC Restrictions on page list properties
Unable to a mask properties for Embed- classes page list properties due to ABAC (Attribute-based access control) restrictions.
Steps to Reproduce
- Access the Sample Administrator portal and navigate to the Members tab.
- Perform a Search using a Member ID and open the member record. Data under 'Previous name(s)' display list is not masked.
A defect in Pegasystems’ code or rules. Access Control policies are not supported at run time for Embed- page list properties.
The issue is resolved by iterating over the property hierarchy to choose access control supported classes (Data-/Work-/Assign-). If a supported class is fetched in the hierarchy, policies from that class are applied, else the policies are not applied.