ACL for SC_task access...

[bennyphipps]

Hi,

I've created a new workflow for a business area and want to send them catalog tasks to perform some work...

I don't want them to have the access provided by the ITIL role out of the box but I do want them to have access to the sc_task table to view and update catalog tasks.

With ITIL role they have all the functionality (but access to more applications than I want them to).  

My role (note: no access )

I've created a new role called "u_wealth_service_catalogue_user" that I have setup on the associated applications/modules and Iw ant users with this role to have access to sc_task to view tasks.

I tried adding a ACL but it did not seem to work so I suspect I was doing something wrong but I know there's a relationship between task and sc_task so was not sure if I was doing something wrong.   I'd like to also be able to limit these roles to only be able to amend certain fields in sc_task as well if someone can advise me.that'd be really helpful.

Kind regards,

Ben

[manikorada]

Ben,

Try to do Debug Security Rules and you will see which ACL is failing.

[bennyphipps]

This is the ACL I setup:

debugging shows this when I impersonate this user:

any ideas?

[manikorada]

Ben,

You need to set up a similar type of ACL on sc_task.--None-- , you need to have row level ACL and table level ACL to get access

[bennyphipps]

Ok thanks...

that's got me much further but the user now can only see a select bunch of fields... not all of them which are default on the form:

user sees:

I managed to make the UI ACtions visible easily enough by restricting to the role but I'd expect the work notes field to be visible as well...?

I even tried added a write ACL for the work_notes field for that role...

Admin sees:

I thought the generic read.* would show all fields???

sorry for being a pain and thanks for the help