In the Design I am using “Search for” feature to filter information relevant to the User. For example - “Do a Search for Records where Current User is Creator”. Thus I am wondering if Data Privacy setting is required. A Privacy Rule such as “Current User is This Items Creator”, would in effect be a redundant step? The Design page shows only relevant data even without privacy rules.
Yes. Privacy setting is the more important one actually. If you have this set up, then you won’t even need the filtering of the information in the search. Only the data that is accessible to the user will be pulled into the browser.
The reason you would do it this way instead is because, if someone knew how to hack, they could still gain access to the information unless you setup privacy settings.
Reference: Privacy - Bubble Docs
Hope that helps!
For All Your No-Code Education Needs:
- One-on-One Tutoring
- eLearning Hub
- Video Tutorials
Thank you. That helps.
Do you know if this impacts performance? Using “Privacy” vs “Do a Search for” to show and hide data.
That’s an interesting question. I wouldn’t have thought about that. Does your data not need to be private? I don’t think there is much of a difference with it since both should be server actions. The only thing that could slow it down is if you do a :filter or and advanced constraint on the search.
Here is Bubble’s documentation on Performance & Scaling if you are interested in finding out what does impact performance.
Hope that helps a bit.
Gotcha! Yes the data needs to be private and as you suggested, setting the Privacy makes sense.
I had left Privacy for the end and used the “Do a Search for” during development to control who can see what. I see the folly in my method.
Thank you for the link and suggestions.
No problem! Glad it helped. I used to set Privacy settings at the end as well. I am trying to make it a habit to do it from the beginning now since that makes it easier setting up the database correctly. Keep up the good work!
Awesome, I never realized that setting data privacy could avoid doing a search with filter. Thanks
Yeah, for sure. It makes sense, it is also good to test your privacy settings like that.
To test my own privacy settings I would put a repeating group on the page with the data type I am testing with no constraints. Then when I log in as a user, I check to make sure it’s only what that user is allowed to see. If not, there is an issue with my privacy settings. I also do this with logged out users to see what they can see. It’s good to do this to make sure your data is safe.