We have a user field on the Employee business class we want Employees to be able to update, but restrict from displaying when pulled into reports. This LPL on the Employee business class prevents me from updating someone else's field, however I am still able to see their data in a report (with my admin privileges removed).
Is there somewhere else I need to look to restrict visibility of the data?
Employee.IDProf Field
is accessible
for all actions
when (authenticated actor.agent(Employee).RelationshipToOrganization = "EMPLOYEE" and Employee.IsEmployee)