Access control

[abjaffrey]

Hi

i have a table called business application which extends cmdb_ci. i want to create a role and add to a group which will have to allow write access to 2 fields which are under a section in the form. i have created 1 read acl on cmdb_ci_business_app and 2 write acl for the 2 fields. 

this doesnt seem to work, any suggestions ho can i make this work

[Anurag Tripathi]

Hi,

Are there any other write ACLS for the same field?

[Ankur Bawiskar · Accepted solution]

@abjaffrey 

those users should also have table.None WRITE access

If you don't create your own table.None WRITE ACL then it will evaluate it's parent level WRITE ACL which might be blocking

Did you check that?

Check below ACL evaluation order

If my response helped please mark it correct and close the thread so that it benefits future readers.

[abjaffrey]

Hi Ankur,

Thanks for your help, it is working on the group, but other group which already had access is getting impacted

[Ankur Bawiskar]

@abjaffrey 

those 2 fields will now be editable only by your group as per your requirement

what do you mean by other group access is impacted?

which access is impacted?

Since you create field level WRITE ACL and it allows edit only for your group then no other group members can edit those.

If my response helped please mark it correct and close the thread so that it benefits future readers.