[CAUSEWAY-1044] Table counts and gmap3/fullcalendar2 do not honour any vetoing, eg by subscribers or WithApplicationTenancy

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: viewer-wicket-1.7.0
• Fix Version/s: 1.10.0
• Component/s: Core
• Assignee: Unassigned
• Reporter: Daniel Keir Haywood
• Created: 19/Feb/15 10:17
• Updated: 10/Nov/15 07:00
• Resolved: 18/Sep/15 10:50

Description

Suppose that the Isis addon security module is being used with application tenancy checking; this means that the Wicket table (CollectionContentsAsAjaxTable) will only show rows for those entities for which the user is authorized (the visibility has not been vetoed).

However, the underlying EntityCollectionModel does contain those objects, and the size of that collection is what is shown in the "showing 1-5 of 15" totals etc rendered at the bottom of the table.

So the question is: how to ensure that figure is correct?

• One option is to eagerly check the visibility of every item (even those not on the current page).
• Another option is to suppress the totals, somehow (would require additional metadata, along with a worse UI for users

~~~
Related: the gmap3/fullcalendar2/excel Isis addons do not check for the object visibility, meaning that they expose information when they should not.