ACL: Form View and List View discrepancies

[Vismit Ambre]

Hi everyone,

I have created a custom role and assigned it to certain group.

I have also created * and None ACLs to give access to the users of that group to the required table (sn_si_runbook_document)

When I try to impersonate any user from that group and try to access the sn_si_runbook_document table, I am not able to see the Number and Short Description of the KB article in the list view. But if I open the record, both the fields are accessible/visible on the form level

Here is the form view:

I tried to debug the ACL, however the conditions are being evaluated to true but the somehow the field values aren't being displayed on the List View.

Any help would be appreciated.

Regards,

Vismit

[Ashutosh Munot1]

Hi,

So you have created a General Acl to give access to view Table and Columns on this table. Also there are ACL on this fields like Number and Short Description where you will have to give access to your group.

Thanks,
Ashutosh

[Vismit Ambre]

Hi,

There are no other ACLs on that particular field. So I specifically wrote an ACL which will allow users with the custom role to read the field(s): short_description & number. But no luck.

Also, one more thing if any ACL would restrict the access to those two specific fields, then those fields should not be visible on the Form Level too. Please correct me if my understanding regarding this is wrong!

Regards,
Vismit

[Chris H2]

Hi Vismit,

From the London release, ACLs applied in list views only have access to the fields on the user's list view. I've seen a similar problem to this where the ACL depended on current.getValue('field_1') when field_1 was not present on the list view.

If this is the problem, then there are only three solutions to this I can think of:

1. Simplify ACL logic to not depend on this other field
2. Re-query the glide record at the start of the relevant ACL (as 'current' only has access to fields in the view)
3. Add the relevant fields to the list view, and possibly set up a scheduled report to let you know when users have customized their view to remove one or more of these fields? Not a great experience, but technically a third option.

Hope this works for you - please mark as solved if this solves the issue.

[Han Wang2]

Hi Vismit,

What Chris said is right, please check the following knowledge. 
This helps me with the same problem, hope it'll help you, thank you.

In list view ACLs on referenced dot-walked records are evaluated only against the specific displayed...