List Filter for a Collection or Global

[artimalternar]

I am playing around permissions. I need to restrict access based on collection item data. e.g. i want a user to give access only to those items that are conditioned to the user. e.g. operate on only those stores where user is from the same country as the store
And basically it all works, I can do this in Access function but when you I return false for e.g. read: Access I still can see collection item in list view in admin panel. And when I click it I get message item does not exists or you do not have access . This looks wierd, since I should not see in in the list view in first place. Can you suggest how to hide not permitted items in the list

• I've digged into the source code, and I do not see any checks for permissions when list view is rendered

• I could not find any collection `hook' where I could filter out not-permitted items from the list view

• also I even could not find any workaround ( with custom view ) components -> views -> list Since looks like you have some architectural drawback there. The Table itself is rendered before the custom component is rendered
  https://github.com/payloadcms/payload/blob/main/packages/next/src/views/List/index.tsx#L229
  https://github.com/payloadcms/payload/blob/main/packages/next/src/views/List/index.tsx#L245
  https://github.com/payloadcms/payload/blob/main/packages/next/src/views/List/index.tsx#L361

• what I expect is that custom list view component would have control over data it's beeing rendering. or, which is better, to have filter hook inCollectionConfig

[tim-the-arcane]

I ran into similar issues. I'm currently working on implementing a real ABAC (attribute-based access control) solution in PayloadCMS.
One workaround is to return a Where query object instead of a boolean in the read Access Hook.

This way, only the items matching the Where condition will be shown.

However, I also found it a bit hacky to detect whether it's a "list" access or a single "read" access. In my opinion, these should really be two separate hooks.