ACL - Deny Unless

[MWright1]

Hi All,

I am trying to block read access to IT requests unless you are part of Service Desk.

I created a Deny Unless ACL as follows:

And add the required roles in the Conditions:

Nothing else...

However, it seems that everyone can still see the records...

Please help.

[Dharma Liyanage]

@MWright1 

Deny Unless's ACL setting seems to be set correctly.
I would verify who was assigned the role of service_desk; often, I ask them to log out and then log back in.

[MWright1]

I have created hi ticket regarding this issue.  Will advise when they figure it out.

[Shivalika]

Hello @MWright1 

You have given condition in applies to - means it will only apply on those records where assignment group is as you have. 

If you wanted something like the logged in user id member of that assignment group or has this role you should have given that in data conditions. 

Kindly mark my answer as helpful and accept solution if it helped you in anyway. This will help me be recognized for the efforts and also move this questions from unsolved to solved bucket. 

Regards,

Shivalika 

My LinkedIn - https://www.linkedin.com/in/shivalika-gupta-540346194

My youtube - https://youtube.com/playlist?list=PLsHuNzTdkE5Cn4PyS7HdV0Vg8JsfdgQlA&si=0WynLcOwNeEISQCY

[MWright1]

"You have given condition in applies to - means it will only apply on those records where assignment group is as you have. "

This is exactly correct.  I only want this rule to apply to the records in the criteria.