From 0c14e6ed4d03aac6898e2dfe4dc5f70678172d43 Mon Sep 17 00:00:00 2001
From: Ludeck <Ludeck1000@hotmail.com>
Date: Tue, 25 Feb 2025 23:35:45 +0000
Subject: [PATCH 1/2] Provide /picklistAll as an alternative to /listAll. 
 Returns the same data but intended only to be used for picklist population. 
 Would enable permissions to be applied differently for that use case.

---
 src/server/data_form.ts | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/src/server/data_form.ts b/src/server/data_form.ts
index b3514319..cf8400a5 100644
--- a/src/server/data_form.ts
+++ b/src/server/data_form.ts
@@ -150,7 +150,9 @@ export class FormsAngular {
       processArgs(this.options, [resourceName, this.collectionGet()])
     );
 
-    // return the List attributes for all records - used by record-handler's setUpLookupOptions() method, for cases
+    // return the List attributes for all records.  two endpoints that go through the same handler so permissions
+    // can be applied differently for the two use cases.  /listAll is intended for listing records on a page;
+    // /picklistAll for listing them in a <select> or similar - used by record-handler's setUpLookupOptions() method, for cases
     // where there's a lookup that doesn't use the fngajax option
     this.app.get.apply(
       this.app,
@@ -159,6 +161,13 @@ export class FormsAngular {
         this.entityListAll(),
       ])
     );
+    this.app.get.apply(
+        this.app,
+        processArgs(this.options, [
+          resourceName + "/picklistAll",
+          this.entityListAll(),
+        ])
+      );
 
     // return the List attributes for a record - used by fng-ui-select
     this.app.get.apply(

From f8388206fead5038e9356edff117f4fff4ddf909 Mon Sep 17 00:00:00 2001
From: Ludeck <Ludeck1000@hotmail.com>
Date: Tue, 25 Feb 2025 23:36:21 +0000
Subject: [PATCH 2/2] Provide getAllPicklistAttributes() as an alternative to
 getAllListAttributes().  Returns the same data but intended only to be used
 for picklist population.  Would enable permissions to be applied differently
 for that use case.

---
 src/client/index.d.ts                 | 1 +
 src/client/js/services/submissions.ts | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/src/client/index.d.ts b/src/client/index.d.ts
index 39cf809a..d416d88f 100644
--- a/src/client/index.d.ts
+++ b/src/client/index.d.ts
@@ -759,6 +759,7 @@ declare module fng {
     readRecord: (modelName: string, id: string, formName?: string) => angular.IHttpPromise<any>;
     getAll: (modelName: string, _options: any) => angular.IHttpPromise<any[]>;
     getAllListAttributes: (ref: string) => angular.IHttpPromise<ILookupItem[]>;
+    getAllPickListAttributes: (ref: string) => angular.IHttpPromise<ILookupItem[]>;
     getPagedAndFilteredList: (
       modelName: string,
       options: IListQueryOptions
diff --git a/src/client/js/services/submissions.ts b/src/client/js/services/submissions.ts
index b8cf46b9..e0e90e07 100644
--- a/src/client/js/services/submissions.ts
+++ b/src/client/js/services/submissions.ts
@@ -130,9 +130,14 @@ module fng.services {
       },
 
       // return only the list attributes for ALL records in the given collection, returning ILookupItem[]
+      // getAllPickListAttributes() is intended to be used to retrieve records for display in a picklist;
+      // getAllListAttributes() for all other use cases
       getAllListAttributes: function (ref: string): angular.IHttpPromise<ILookupItem[]> {
         return $http.get(`/api/${ref}/listAll`, { cache: expCache });
       },
+      getAllPickListAttributes: function (ref: string): angular.IHttpPromise<ILookupItem[]> {
+        return $http.get(`/api/${ref}/picklistAll`, { cache: expCache });
+      },
 
       // return only the list attributes for records in the given collection that satisfy the given query conditions (filter, limit etc.)
       // return ILookupItem[] if options.concatenate is true, else the raw documents