ACL Help Needed

[SandeepKSingh]

Hi @Team,

Below Question has been asked in my Interview recently. I wanted to know the expert answer on this.

Explain what will happen for below scenario :

1. Read Table.none access is provided to Users with Role A,B,C.
2. Read * level access is provided to users with Role B.
3. Read access to priority field is provided to users with Role C.

[Ravi Gaurav · Accepted solution]

Hi @SandeepKSingh 

According to me :-

1. Role A Users: Users with role A can pass the table-level (row-level) access check but fail to access any fields because they do not have the necessary permissions at the * or specific field level.

2. Role B Users: Users with role B can access all fields on the table except the "Priority" field. This is because they have permissions through the table.none and table.* ACLs, which grant access to most fields. However, a specific ACL restriction on the "Priority" field prevents them from accessing it.

3. Role C Users: Users with role C can only access the "Priority" field. They have permissions at the table level and for the "Priority" field specifically, but they lack the * ACL, which restricts their access to all other fields.