ACL not working properly

[amaneet]

Hi Folks,

I have one custom table/application and have modified one ACL out of the ones which get generated automatically.

My intention is to limit the visibility of records to only those where there are assigned.

So i have modified the read ACL to include one more role(ITIL)

and wrote an advanced script

answer= current.assigned_to==gs.getuserid();

everything works fine except the ITIL users are not able to create new records. Only submit button appears on form (no fields)

If i remove the advanced script from read ACL, they are able to create.

Am i missing something, please guide?

[amaneet]

Can some one help me to understand the difference between table.none and table.*   (with example)

[abhishekdash]

Sure Amanjeet,

Table.none is the access to the table.

Table.* is the access to all the fields inside the table. You can have table.fieldname to provide access to specific fields.

Below doc will help you understand the same.  

Access control rules

I would also suggest reading the process order for record acl rules:

Process order for record ACL rules

Record ACL rules are processed in the following order:

• Match the object against field ACL rules.
• Match the object against table ACL rules.

Hope this helps.

Thanks,

Abhishek

If this reply assisted you, please consider marking it Correct, Helpful, or Like it.

This helps other customers to learn from your thread.

[lSurya 24]

Hello,

Table.none gives access to only table whereas table.* gives access to all the fields on the table. simply table.none is a row level whereas table.* is a column level.
You will find so many links for example on wiki and community on this.

Hope it helps.

[Dave Smith1]

Imagine a hotel. You walk into the reception, where there are doorways leading off to other places. Some a bar, a lounge, a study, the lifts.. others into private areas (staff quarters, cloakroom, etc):

• table.bar is a rule that affects JUST that individual room - the bar.
• table.lounge affects JUST the lounge
• table.* is a default for all doors, overridden by more specific ones (see above)

So in this case, I would give a hotel guest table.* = entry but then have table.cloakroom = entry for hotel staff. This overrides the standard rule for hotel guests, permitting only specific roles (hotel staff) entry to the cloakroom.

Lastly, table.NONE is a rule that says whether or not you can enter the hotel. If guests don't have table.NONE = entry then any table.* or table.field rules for them are pointless because they never get to see them.

Hope that helps.

[abhishekdash]

Awesome way to explain!!