RecordPermissions
Defines record-level access policies that determine who can view, modify, delete, or reassign a record, supporting compliance and security reviews.
Select
The AppId column is required in the WHERE clause. The add-in will use the Kintone APIs to filter the results by this column. By default, the add-in will process other filters client-side within the add-in.
For example, the following queries are processed server side:
SELECT * FROM RecordPermissions WHERE AppId = 6 SELECT * FROM RecordPermissions WHERE AppId = 6 AND Lang = 'en' SELECT * FROM RecordPermissions WHERE AppId = 6 AND IsPreview = false
Update
For updating the AppPermissions, provide the Rights as an aggregate. The AppId and IsPreview columns are required to update the RecordPermissions.
UPDATE RecordPermissions SET Rights = '[{"filterCond":"","entities":[{"entity":{"type":"GROUP","code":"everyone"},"viewable":false,"editable":false,"deletable":false,"includeSubs":true}]}]' WHERE AppId = 6 AND IsPreview = true
Columns
| Name | Type | ReadOnly | References | Description |
| AppId [KEY] | Integer | False |
Identifier of the Kintone app whose record-level permission settings are being retrieved or updated. | |
| FilterCond | String | False |
Filter condition expressed in query-string format that determines which records the permission rule applies to. | |
| Entities | String | False |
Array listing the users, groups, or departments that receive the record-level permissions, ordered by priority to control how permissions are evaluated. | |
| Revision | String | False |
Revision number of the app settings, helping track updates to record-permission configurations. |
Pseudo-Columns
Pseudo column fields are used in the WHERE clause of SELECT statements and offer a more granular control over the tuples that are returned from the data source.
| Name | Type | Description |
| Lang | String |
Locale code used to retrieve record-permission details in a specific language. |
| IsPreview | Boolean |
Indicates whether to retrieve record-permission details from the preview environment ('true') or from the live environment ('false'). The default value is 'true'. |
| Rights | String |
Value used only when performing an update to supply modified record-permission settings. |