When a CRM SmartObject Get List method contains a filter configured to only return certain data, executing this method with impersonate rights results in the filter being ignored and all data is returned. This only occurs if the person executing the method does not have rights in which case K2 will retry the execution using the K2 Service account.
The filter was not applied for the K2 Service account.
- Ensure you have K2 4.7 installed.
- Download and install the K2 4.7 November 2017 Cumulative Update from K2 Partner and Customer Portal.
- Get the K2 4.7 November 2017 Cumulative Update FP5 from Regional Support.
- Install the K2 4.7 November 2017 Cumulative Update FP5 to apply the fix.