Live Filtering and the Additive Permissions Concept
Remember that Cumulus permissions are based on an additive concept. By default, Live Filtering works in accordance with this concept.
Multiple Roles
If a user is assigned to multiple roles, her/his permissions are the sum of the permissions of these multiple roles. So if assigned to multiple roles with different Live Filtering restrictions, the user has access to the sum of the search results defined by the queries applied to those roles.
Queries and View Permissions
A user who is allowed to open a catalog but not to view its records or categories will nevertheless be able to see the records/categories found by the queries assigned to her/him by Live Filtering.
Individual Permissions for Records and Categories Precede Queries
A user who by individual permissions for records/categories is allowed to view records/categories will always see them – regardless of the results of Live Filtering queries. Individual permissions for records /categories have priority.