ACL and UI Policy Conflicting on one field

kristenankeny
Tera Guru

I have a table that extends sc_request. I have a form set up that includes the field "description". I have set up the ACLs to make this table and "description" (because I needed to mask task.description ACL) only editable by the opened_by and the u_owned_by. I have two UI Policies for onLoad, reverse if false is unchecked. The first UI Policy (100) runs on the form always (no condition) and makes most fields read only and sets "read only" to false for Description and my two other editable fields. The second UI Policy (200) runs on the form when the state is not "draft" and sets "Read only" to true for description and the two other fields.

When I load the form as opened_by, all fields show editable at the right points.

When I load the form as someone else (no editing capability because they are not the opened by or owned by), most fields show correct except description. When description should be set to read only, it still shows editable.

ACL to make write for table limited to opened by and owned by:

find_real_file.png

ACL to make write to description on table limited to opened by and owned by:

find_real_file.png

UI Policy to apply to all records:

find_real_file.png

UI Policy running when record is not in draft (note, the three fields are set up the same in the above and below ui policies):

find_real_file.png

Form, when in draft, as Opened by (this is correct):

find_real_file.png

Form, when not in draft, as Opened by (this is correct):

find_real_file.png

For, when in draft, when not opened by or owned by (description is the only field loading incorrectly):

find_real_file.png

Form, when not in draft, when not opened by or owned by (this is correct):

find_real_file.png

6 REPLIES 6

nishailame
ServiceNow Employee
ServiceNow Employee

Can you try with unchecked admin overrides in ACL?



 


Thanks.



PS: Hit like, Helpful, Correct and Endorse, if it answers your question.


I tried what you suggested, but that didn't resolve. I still see the same behavior.


DUGGI
Giga Guru

Hi Kristen,



While creating new ACL on custom table "description" did you get the pop up for mask OOB description ACL ?


Yes, it told me it was masking the task.description ACL and when I debug security, I show that all of the "write" ACLs evaluate to false for the other user.