Hi everyone,
I'm working on a project in ThingWorx where users (e.g., customers) should only be able to see and interact with their own data. Here's the scenario:
Past Setup:
I have a configuration table that includes a field subUnitMapping, which links customers to their specific datasets.
When a new customer accesses the application for the first time via mobile, a dataset is dynamically created and the appropriate subUnitMapping is assigned to both the dataset and its Thing for permission control.
In the mashup, users select their line from a dropdown, press a button, and are navigated to their respective mashup/data.
🧩 Current Setup Challenge (new project):
I have datasets for different customer and customers land to dropdown page where they choose their name from dropdown and then enter to navigate to their own mashup. I mean i can make this with textfield that they have to write something in it and enter to come to mashup with their own dataset....
In the dropdown list, all customer values are visible, which is a problem.
If Customer A sees and selects Customer B’s line by mistake (or intentionally), they will be redirected to someone else’s mashup — which is a security issue.
My Goal:
I want each customer to only see their allowed dropdown value(e.g., only their dataset/lines) in the dropdown.
🧠 Any Ideas?
How can I:
Appreciate any suggestions, best practices, or examples!
Thanks,
