Thursday, January 18, 2007

Opportunistic Search Trap

The opportunistic search trap kicks in if you try to search on a particular element of an object without having permission on all the elements in the object. To avoid the OST, grant permissions on all the elements of an object for a given qualifier, or specify the qualifier for which you have permissions in the search.

If you have permissions on address line 1, you're going to get caught with a wide open search on addresses. Similarly if you have permissions on all elements of address for "Business Contact" you're going to get caught unless you specify "BC" in your search.

Comments: Post a Comment



<< Home

This page is powered by Blogger. Isn't yours?