ACL and UI Policy Conflicting on one field
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-09-2017 08:35 AM
I have a table that extends sc_request. I have a form set up that includes the field "description". I have set up the ACLs to make this table and "description" (because I needed to mask task.description ACL) only editable by the opened_by and the u_owned_by. I have two UI Policies for onLoad, reverse if false is unchecked. The first UI Policy (100) runs on the form always (no condition) and makes most fields read only and sets "read only" to false for Description and my two other editable fields. The second UI Policy (200) runs on the form when the state is not "draft" and sets "Read only" to true for description and the two other fields.
When I load the form as opened_by, all fields show editable at the right points.
When I load the form as someone else (no editing capability because they are not the opened by or owned by), most fields show correct except description. When description should be set to read only, it still shows editable.
ACL to make write for table limited to opened by and owned by:
ACL to make write to description on table limited to opened by and owned by:
UI Policy to apply to all records:
UI Policy running when record is not in draft (note, the three fields are set up the same in the above and below ui policies):
Form, when in draft, as Opened by (this is correct):
Form, when not in draft, as Opened by (this is correct):
For, when in draft, when not opened by or owned by (description is the only field loading incorrectly):
Form, when not in draft, when not opened by or owned by (this is correct):
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-09-2017 08:50 AM
Can you try with unchecked admin overrides in ACL?
Thanks.
PS: Hit like, Helpful, Correct and Endorse, if it answers your question.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-09-2017 09:06 AM
I tried what you suggested, but that didn't resolve. I still see the same behavior.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-09-2017 08:53 AM
Hi Kristen,
While creating new ACL on custom table "description" did you get the pop up for mask OOB description ACL ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-09-2017 09:02 AM
Yes, it told me it was masking the task.description ACL and when I debug security, I show that all of the "write" ACLs evaluate to false for the other user.