Security filter not applied some of the users

[rajib2904]

We have applied oids and group security filter while searching. But it did not work some of the user.For the user it did not work here is the response
"filter": "(oids/any(g:search.in(g, ''))" is empty. Can you please let me know what went wrong here?
{
"title": "Search using generated search query",
"description": "Snowflake",
"props": {
"use_semantic_captions": false,
"use_semantic_ranker": false,
"use_query_rewriting": false,
"top": 3,
"filter": "(oids/any(g:search.in(g, ''))",
"use_vector_search": true,
"use_text_search": true
}
},

Regards,
Rajib

[pamelafox]

Hm. I suggest adding more logging to the build_security_filters function in authentication.py

I think that the only way for that filter to have come about is if the oid claim was empty for the user for some reason:

    oid_security_filter = (
        "oids/any(g:search.in(g, '{}'))".format(auth_claims.get("oid", "")) if use_oid_security_filter else None
    )

Is this using the built-in auth on Container Apps? Did you bring in my recent fix for that, if so?
#2724

[rajib2904]

Yes we are using built-in auth on Container Apps.Even after deploying the application with the fix getting same error