Better solution regarding Privacy Issue

[animisha45]

In an app, we have certain data tables that work similar to Notion/Google drive share capabilities. If the data is shared with a certain list of users, they need to enter their email to access it.
The privacy rules are also set accordingly.

When the user enters there email, I check their access via backend workflow (which ignores privacy rules) and returns yes/no.

I update the state on my page and show the group with the details.

My problem is that the privacy rules do not refresh until I refresh the page, which creates a bit of bad UX for the end user.

Have any of you tried something similar and do you have a better solution?

[ntabs]

@animisha45 yeah it’s a known bug. Here’s some details about it:

Real-Time Data Issue Not Being Resolved

Update… [CleanShot 2024-08-28 at 22.37.55@2x] [CleanShot 2024-08-28 at 22.38.16@2x] For me, I struggle to see how it can be classified as expected behaviour if a privacy rule updates in real time with one constraint, but not with another constraint… Unfortunate, but that’s the response and it’s here to try. For anyone that stumbles across this thread in future, the bug is at least sometimes caused by privacy rules that references Current User’s X List of Y contains This Y. There…

[boston85719]

Maybe if you put a data field on the thing, list of UIDs of users that have access, buts it just list of text, not users. Then privacy rule is things list of text, contains current users UID.

This is a secondary privacy rule, not the main one, as you don’t want to store the list text indefinitely.

[animisha45]

I have set it is as you have mentioned. Data contains list of Users (for signed up users) and list of text (emails of users not signed up on platform). Privacy rules for both.

[boston85719]

Does it work so that you do not need to refresh the page now?

[animisha45]

@boston85719

Does it work

No.

I meant that your recommendation is the original setup and I need a refresh the page.

[animisha45]

I was trying a bit more here and something new that I found out,

If I search for the thing in workflow and make changes to it, I do not need to refresh the page.

However, when I display data, I need to refresh the page.

Hope that makes sense.

[ihsanzainal84]

From the manual:

Caution: Privacy rules do not update automatically on the page if the privacy rules impacting a user change while the user is on that page.

For example, if a user has a page open where they can see a Thing, then they click a button on that page that changes which privacy rules apply to them such that they can no longer see that Thing, this new privacy rule outcome will not reflect on the page until the page is refreshed.