Action required! Changes to filter processing in Triggre

A change will be made in how filters are processed in Triggre, to solve an important defect in the platform. This change only applies to specific cases, but can expose information to users that shouldn’t have access to that information if not checked. This situation only applies to filters which contain references. These filters can be used in a table overview, flow parts, validation rules or rules for displaying buttons.

The result of the change itself

In case both parts of an equation with references are empty, the equation will give the wrong theoretical result. Where it should be true it returns false. This behavior will be changed, so that the result will be true, which may affect your application.

A filter that looks like this: [data-item-reference-1] IS EQUAL TO [data-item-reference-2] can be affected by this issue.

Example

Below is an example to show you how this issue can affect your application.

There are two data-items:

  1. User

  2. Department

The user is linked to the department as an Employee. And the department can have one or more Users linked to it.

The filter in Triggre would be:

[Current user / Department] IS EQUAL TO [Department]

Currently the system would only show the department which is linked to the current user. In case you are not linked to any department, you see no departments at all.

In the new situation however, in case the user is not linked to a department, Triggre will show all departments with no users linked to them.

Solution:

If you don’t want this (example above, red) to happen and show no departments at all in case the user is not connected to a department, you have to add an additional part to the filter.

In the new situation you have to explicitly state that one of the two items in the equation is NOT EMPTY.

[Current user / Department] IS EQUAL TO [Department]

would be changed to

[Current user / Department] IS EQUAL TO [Department] AND [Current user / Department] IS NOT [Empty]

How to proceed:

We’ve created a list with all filters of your application where you have used a filter where you check a reference of a data-item against another reference of a data-item.

You probably don’t have to apply the additional part to each and every filter we listed. However, since we don’t know the full specifics and details of your application, we simply can’t determine if it would apply in that situation.

You need to decide for yourself:

  1. is there a chance this reference is Empty
  2. is there a chance the other reference is Empty as well

If both answers are “Yes” we would advise you to add the additional filter to it. That ensures that nobody can see information they shouldn’t.

Support

We can imagine that you might not know for sure if the specific part needs to be applied. You have two options then:

  1. Apply the additional part to be sure
  2. Ask us for help via our support-forum: https://community.triggre.com/

Deadline

We are going to update Triggre on 1 August 2024. You need to have checked the listed items before that date. After 1 August 2024 we are going to update the platform and the new filter will be in effect.

1 Like