View should respect field rights

Issue description

It should be possible to create views that respect field rights. Currently field rights are not checked for views, since it is assumed that the administrator knows what he is doing. Yet, this might lead to problems in large systems. By default views should be not checked but an optional flag should enable it.

Developer comments

Views should *always* check field rights, otherwise other controls would be necessary to prevent information disclosure.

Reporting date

2020-04-12

Reported by

Robert Cerny

Resolving date

2020-04-20

Resolved by

Robert Cerny

Resolved in version

Topincs 8.6.0

Part of

Improve user and rights management(Enhancement)

Caused2

Reflected store shows no information and forms without fields(Bug)

Cached topic jtm served to other user group(Bug)

Work sessions4

9229

9230

9231

9232

Duplicate of

Security checking views(Enhancement)