I'm using v. 2.2.12 enterprise.
I've got a problem using onCreate.identityType.
The documentation says:
onCreate.identityType: Specifies whether to insert the user's object or its role (the first one). By default, it is set to user, but you can also set it to use its role.
But it's not true, I've got a user with multiple roles and inserting a new record into a ORestricted class it takes randomly on of them. Here what I did:
Casually _allow field contains #4:1 or #4:2
Is it a bug?
If not, any suggestion for making it work like written in the documentation?