Filters not working for users access grp but working fine with dev access grp

User Experience
, ,
1

Hi ,

i have a non optimize code table in a section and only “Allow filters” is enabled but not “Allow column sorting”.
on the UI when i login with dev access grp i am able to apply filters properly but with End users access grp i am getting SRVE0295E/403 forbidden console errors when trying to apply filters.

when i enable “Allow column sorting” or “pyBlockUnregisteredRequests” when condition to false, from end user access grp able to apply filters.

looking for an explanation on this behavior.

Thanks.

tabl1.png
tabl1.png1003×789 42.1 KB

2

@Prudhvi.Athapu

Do you see any errors relating to ‘Unauthorized request detected : Unregistered request encountered’?

3

@Gayatri Nistala yes, i see SRVE0295E in browser console and below security alert logs:
Unregistered request encountered with params pyActivity:ReloadSection eventSrcSection: PreActivity:pzdoGridAction*
Unregistered request encountered with params pyActivity:ReloadSection eventSrcSection: PreActivity:pzdoGridAction PreDataTransform:*
Unregistered request encountered with params pyActivity:ReloadSection eventSrcSection:Pega-ColumnFilterCriteria.pyUniqueValuesGrid PreActivity:pzdoGridAction*
Unregistered request encountered with params pyActivity:ReloadSection eventSrcSection:Pega-ColumnFilterCriteria.pyUniqueValuesGrid PreActivity:pzdoGridAction PreDataTransform:

4

@Prudhvi.Athapu
Here is an explanation of your issue

The filter functionality in your non-optimized code table isn’t registered in the BAC Security Registry. This triggers SECU0019 warnings and 403 Forbidden errors for end users.
Dev Access Groups typically have elevated privileges (e.g., pyStandardUpdate), bypassing BAC checks.
End User Access Groups follow stricter security policies, enforcing BAC validations.

Why Enabling Sorting/Disabling BAC Fixes It

Allow Column Sorting: Automatically registers the component in BAC during column configuration.
pyBlockUnregisteredRequests = false: Disables BAC validation entirely (not recommended for production)

BAC stands Basic Access Control