How secure are user prefilters

[uktran]

If i have a list with a user prefilter my>id restricting results, is this secure at all, or can someone who knows how, view all the records by tweaking the URL or something easy?

 

[cheesegrits]

If the pre-filters are on the List itself, they are as secure as we can make them, and should get applied to any access to that List, through any form of query within Fabrik. We make no guarantees though, as Fabrik is a large and complex app, and there may be gaps in security we are not aware of. Having said that, we've only had one issue reported in the last year we had to plug, with thousands of sites using it, so it's definitely "fairly secure".

If the pre-filters are set on a menu item, they can be easily bypassed.

-- hugh