How to restrict the data based on the AOR Country Based.

Summary:

Hi Team,

We have one custom role got created, where it is working based on the PersonSecurity profile and that person security profile is liked with AOR and that AOR should able to access only Country "US".

For most of the cases that custom role is working as expected but failing one case.

If Employee has at least one Assignment with "US" country then it is picking that employee and also it is picking if the employee is from Other Country.

Ex; Employee: John.

This Employee has Two Work Relationships.

 1) Employee with US Country and Inactive Assignment.

 2) Employee With UK Country and Active Assignment.