XPath constraints for external entity access rules - Mendix Forum

XPath constraints for external entity access rules

2

Currently, if you obtain the data source of DataGrid2 from an external entity and set an XPath constraint,it is possible to obtain and tamper with the XPath constraint from access.This is a security issue that can be avoided by setting an XPath constraint in the entity's access rules,

 

but since there is no XPath constraint in the access rules for external entities,it cannot be avoided this way.

 

So, if you could use XPath constraints in the access rules for external entities in the same way as for entities,wouldn't it be convenient since the setting method would be the same as for entities?We would appreciate it if you could consider adding this functionality.

 

Thanks!

asked
0 answers