Question
We are currently using a system-wide search (Meilisearch) in our internal automation project. The system is used by several roles, each with access to different tables and different records within those tables. At the same time, a general search is applied across all tables. Is it possible to enhance Meilisearch settings with a role-based model that will allow search results to display values only if the user has the right to view that value in the table?
Answer
Meilisearch in totum filters search results before sending them to the user's browser. It checks:
— access to the table — access to a specific row
A specific row refers to access restrictions through a Prefilter. If a prefilter exists and it has blocked the user from making changes, then the selected search results are checked through these prefilters before being issued.
The entire batch of search results is subject to filtering.