Protecting an external list by filtering for the current user

Question

I installed an external content type with a column that contains Active Directory accounts to map each entry to a user. Now I want users to display only those entries in the list in which the AD account entry matches the current user credentials.

So, I tried the following approach and was able to create a user context filter in the ReadItem / create / update / delete operations. However, there is no option for it in the ReadList operation; the wizard has different filter parameters.

As a result, the user can see all the items in the external list, but can only open those that are marked with his account, so the filter definitely works. However, the presence of a filter only by elements, and not by the entire list, is useless (elements that cannot be opened confuse the user, viewing the list may in any case expose data, etc.).

I tried to filter this list with the website of the current user, which gives us the desired result, but the list itself, of course, still sits in the background and can be opened at the URL.

How can I get the user context filter used in ReadList? And if this is not possible, where and how do you implement such a filter?

Answer 1

Export the BDC metadata model from SharePoint Designer and manually edit it to enable the UserContext filter. Then reimport the model through the BDC service application in central administration.