Hi,

First post/question, so please be gentle :-)

I am trying to put together a security model around fields in my
index. My requirement is that a user may not have permission to view
certain fields in the index when he does a search. For example, he may
have permission to see the name and address, but not the occupation.
Whereas a different user with different permissions will be able to
search all 3 fields.

What is the best way to model this?

My current stab at this has a document-level security level set (I
have a field called security_default), and all fields have this
default. If there are exceptions, I have a multiValued field called
'security_exceptions' where I comma delimit the fild name and
different access permission for that field. Eg I might have
'occupation=Restricted' in that field.

This falls over when I copyField fields into a text field for easier searching.

Has anyone else attempted to do this and are willing to share their ideas?

Thanks in advance,
Geoff

Reply via email to