After creating a user group without access to Ratings in the RE database and adding a user to this group, users are able to view wealth ratings in NXT even though they cannot view these ratings in the RE database.
This issue was specific to Organizations that did not have RE Search unlocked. The Ratings used different permissions in that instance. That specific issue was resolved with a release to correct the problem.
If a User does not have rights to view Ratings within Database View but is able to view the Ratings within NXT Web View from a List, this is working as designed. If a user in NXT has access to view and utilize Lists, they are able to view any fields available with the List. The security setting within The Raiser's Edge database view does not carry over to Lists at this time.
Please add this as a suggestion to our Idea Bank. https://community.blackbaud.com/products/raisersedgenxt Our developers check here first when considering program enhancements and features to see what our users are most interested in seeing implemented. You can review other ideas and vote for them and of course if your idea is already listed, be sure to add your vote.
Steps to Duplicate
Log into RE using a username with Supervisor rights
Click "New User Group"
Unmark the "View", "Add", "Edit", and "Delete" checkboxes for the Ratings row