WEBLIB Security - All in the Record Name
A customer recently created some custom IScript that was triggered from a page button. Pressing the button popped open a new browser window with printer-friendly text saved down from a variety of data fields on the page. Everything worked fine except that not everyone was authorized to use the button logic. Isolating the error pointed to the custom IScript call, per the following line.
ViewContentURL(GenerateScriptContentURL(%Portal, %Node, Record.<custom recname>, Field.PRINT_BTN, "FieldFormula", "IScript_<custom IScript>"));
When implementing an IScript, the container or WEBLIB record name must be prefixed with "WEBLIB_". So the code line above should really read something like:
ViewContentURL(GenerateScriptContentURL(%Portal, %Node, Record.WEBLIB_<remainder of custom recname>, Field.PRINT_BTN, "FieldFormula", "IScript_<custom IScript>"));
