0

I have an entity, customer, which is restricted by XPATH for users of role “User”. I created UI which shows customers and, of course, everything works are expected. I.e. European users can see only European customers and American users can see only American customer. I exposed the functionality via REST GET. In the request I am specifying what user I am impersonating and then use executeMicroflowAsUser to retrieve customers. I expect that I retrieve customers which are eligible to be seen by the user. Unfortunately, this is not the case. Even though the microflow logMessage does show that the current user is the one I am impersonating, but the customers are executed for the user whose credentials are provided when I called the REST GET API. Is this an expected behavior? 

asked 2019-03-21

0 answers