Goal
This article provides information on how to use the filter by permissions feature and how it works.
Prerequisite
Configured Connector - Configure Hawksearch
Steps to configure filtering by Permissions
Create a user and assign him a role
Open or create a Sitefinity page
Place the Hawksearch box and Hawksearch results widgets
Open the widget designer of each widget and click the checkbox
Filter by permissions workflow
When filtering is active the connector exposes endpoints for the search and autocomplete queries making it work as a proxy.
Typing in the search box triggers the connector’s autocomplete endpoint. Searching triggers the connectors search endpoint.
A server-side call to the Hawksearch API is made which returns the result for that request
The user’s permissions are evaluated and used to filter the results server-side
After the filtering is completed the results are displayed to the user though the Hawksearch result widget
By filtering the results on the server nobody will be able to intercept the request client-side and see the results before they were filtered.