Hi @Lisa71 ,
Yes, your understanding is correct.
ACL Types
Read ACL → Controls whether a user can *see* records in a table (e.g., open a list or form).
Write ACL → Controls whether a user can *update* records in a table.
Report_view ACL → Controls whether a user can *see data from that table inside reports* (like charts, dashboards, analytics).
All ACLs follow the same logic?
Yes — all ACL types follow the same basic principle:
If no ACL of that type exists → access is allowed by default.
If any ACL of that type exists → the system enforces it, and only users who meet the ACL conditions can access.
No report_view ACL defined:
Everyone who has general access to the table (via read ACLs or roles) can see its data in reports.
In other words, reporting is open by default. Ifnone report_view ACL defined, then the system now enforces report_view rules.
Example: If you create a report_view ACL that only allows the `admin` role, then only admins can see that table’s data in reports.
All other users, even if they can read the table normally, will not see its data in reports unless they’re explicitly included in a report_view ACL.
Mark it helpful if this helps you to understand. Accept solution if this give you the answer you're looking for
Kind Regards,
Pavani P
