Hi all once again,

 

Is there a way to disable url parameters on an individual xpage?

For instance, you can set a view control to only return a single category via the categoryfilter property, however a user with enough knowledge can get around this serverside filtering by passing 'categoryFilter=xxxx' into the url and access things they shouldn't.  I know there's a read-access names field but I have another post regarding some issues I'm having with that when you have a large volume of documents.

 

So I'm just wondering if there's a XPage method to disable url parameters?  I use URL parameters elsewhere so I would preferably not want to disable them for the entire database, but if there is only a way to do this database-wide, please share that also as I may be able to use it in a workaround in some way.

Thanks in advance!