Business Connectivity Services columns that are part of a list (external data type column) are not security trimmed for users who do not have access to the BCS. The users can see all the columns which includes the BCS columns even though the user doesn’t have any permissions in the BCS.
The product is designed so that the Business Connectivity Services data is actually stored in the 'AllUserData' table instead of having a reference to the BCS source.
This is by design.
Raksta ID: 2503619. Pēdējo reizi pārskatīts: 2011. gada 22. febr.. Pārskatījums: 1