Granular record acces: is this impossible?

[vidierre]

I have to build an app where a local manager has to see all data of al offices in his territory and operators, assigned to offices by their manager, has to see data of their office. This is quite easy using data restrictions available in datapages and ad hoc fields into profiles.

The issue raise with the requirement to have some operators that has to be assigned to more than one office. All solutions that I had able to think became a big limitation to app flexibility.

Anyone has some idea?

[vidierre]

On 2/12/2023 at 2:27 PM, vidierre said:

I have to build an app where a local manager has to see all data of al offices in his territory and operators, assigned to offices by their manager, has to see data of their office. This is quite easy using data restrictions available in datapages and ad hoc fields into profiles.

The issue raise with the requirement to have some operators that has to be assigned to more than one office. All solutions that I had able to think became a big limitation to app flexibility.

Anyone has some idea?

Since there is no contribution so far and it seems a usecase that should be frequent, I want add details to the scenario.

We have more Agencies where each of them is acting like a tenant. Each Agency can have more offices where a kind of workproducts are handled. This is shaped into three tables.

 

 

 

 

 

 

 

 

 

On these data I need to allow access to all workproducts of one agency to an Agency Manager. At the sametime office's employees have to access only to workproducts related to an office.
These two scenario are shaped into the following pic:

 

 

 

 

 

 

 

 

 

 

 

This can easily obtained using different datapages (sigh...) for Agency Manager and Office Employees that filter records on some fileds into their profiles.

BUT the issue arise with the third scenario where, employees on one agency has to work with more than one office workproduct, like described in the following pic:

Some employees has to work on more than one office's workproducts.
As far as I can understand the only methods available with caspio to filter records are:

1. Restrict record access based on user identity - But it can be done only by matching Identity field in Authentication table with one field into the datasource. There is no possibility to use differents operators between these two field (i.e. XOR)
2. Limit lookup values based on user identity - Used only into dropdown fields and having the same limitations ov previous.

Anyone hase been faced with this issue?
Are others methods available that I missed?