Restrict Update to record-owner

[HCF]

Hi, I want to restrict the possibilities for update of a specific record, such that only the owner(creator) can edit. Others should still be able to view in read_only mode.
Thanks for any help!

[Suvrutt_Gurjar]

Please take a look at the following help articles.

help.appsheet.com

Limiting Users to Particular Tables, Views, and Actions

How to make sure that your users can see and do only what they need to

help.appsheet.com

Controlling Add, Update, and Delete

How to determine how much your app users can modify data.

The below topic is also somewhat related if you wish to restrict at device level the records reaching according to user roles.

help.appsheet.com

Security Filters: The Essentials

You can use Security Filters to control which records a user can see and update.

[HCF]

Hi, I tried:
SWITCH(USEREMAIL(),
"[Creator], “UPDATES_ONLY”,
“READ_ONLY”)
where Creator is the UserEmail() entered when a new record is created.
Didn’t work though.

[Suvrutt_Gurjar]

Could you describe , how many creators you are likely to have and what is the [Creator] column type -is it an email type column ? Is it in the same table as where you are trying those expressions?

[Suvrutt_Gurjar]

If you have just one or two creators, you could try an expression something like below

SWITCH(USEREMAIL(),
"creator1@mydomain.com", “UPDATES_ONLY”,
"creator2@mydomain.com", “ALL_CHANGES”,
“READ_ONLY”)

In the above creator 1 will have updates permission only and creator 2 will have update, delete and add permissions. Rest of the app users will have read only access.

The above is just an example. You will need to use some combinations to AND() , OR() to combine emails depending and probably to pull emails from other tables if you have another user table depending on your needs.

[Suvrutt_Gurjar · Accepted solution]

Hi ,

On rereading your requirement, it sounds that you wish to have record level edit control by the owner of the record , whoever created it rather than table level permissions.

One of the methods (controlling which actions user can invoke) described in the first article referred above. ( Limiting users to Particular Tables, Views and Actions)

If so, I believe that in the system edit action condition of the table, you could add [Creator]=USEREMAIL()

Please refer the last post in the below thread to find the system actions.

Prevent certain records from being deleted Questions

Hello, I have a table named “Orders” where clients create new records with the default value of “Pending” for the column Status. If the order gets processed by the internal team, the value of “status” changes to “confirmed” The client should only be able to delete records that have [Status]=“Pending”. I realize that with Behavior I can control if it can be edited, but this does not prevent it from being deleted. The only workarround I see, is copying/moving the record to another table when …

[HCF]

Suvrutt_Gurjar:

[Creator]=USEREMAIL()

That did the trick, thank you!

[ctrlcostnow]

please where did you insert this?

Inside Edit IF?

[HCF]

Yes, the [Creator] is an email type column.
There is only one creator and its the same table were I try to set the expression.