Server-side PostRunView data hook enforcing Row-Level Security (RLS) and Field-Level Security (FLS)
on anchored conversations (MJ: Conversations where AnchorType IS NOT NULL) and their comment
messages (MJ: Conversation Details).
Guarantees that even a raw RunView call over GraphQL, REST, or server code cannot return:
Anchored conversation threads (MJ: Conversations) attached to a linked record that contextUser
cannot read (entity permissions + RLS), or anchored/stamped with restricted fields (AnchorKey /
AnchorMetadata.restrictedFields) that contextUser is denied Read access to (FLS).
Comment messages (MJ: Conversation Details) belonging to any such anchored conversation thread.
Never mutates results.Results in place (safe with frozen cache entries); returns a replacement
RunViewResult whenever rows are filtered out.
Server-side
PostRunViewdata hook enforcing Row-Level Security (RLS) and Field-Level Security (FLS) on anchored conversations (MJ: ConversationswhereAnchorType IS NOT NULL) and their comment messages (MJ: Conversation Details).Guarantees that even a raw
RunViewcall over GraphQL, REST, or server code cannot return:MJ: Conversations) attached to a linked record thatcontextUsercannot read (entity permissions + RLS), or anchored/stamped with restricted fields (AnchorKey/AnchorMetadata.restrictedFields) thatcontextUseris denied Read access to (FLS).MJ: Conversation Details) belonging to any such anchored conversation thread.Never mutates
results.Resultsin place (safe with frozen cache entries); returns a replacementRunViewResultwhenever rows are filtered out.