ACL's

[Ankitha4]

Requirement is to restrict aws events access to only members who has aws role .We have written a acl for that but the aws events are visible to admin , so we have written a query business rule to restrict access to admin as well ,

this is the query business rule 

But if the user has aws role and is a admin then the aws events are not visible.Can you suggest a code to include that condition as well in the above code.

[Anurag Tripathi]

Hi,

Any reason why you went with Query Business Rule?

You can easily manage this with ACL with Admin Overrides checkbox unchecked. Have the role added as aws and add condition as needed.

[Ankitha4]

Hi Anurag , 

thanks for the reply , we tried unchecking the admin overrides check box ,but it didn't work.

Ankitha

[Anurag Tripathi]

Are there any more ACLs on the sale level that have admin override true? If so then uncheck form that too.

By same level I mean <table name>.<none> OR <table name>.<*>

The challenge with BR is you need to see if the user has aws role directly and not inherited form admin. This can be easily dont if there if the users would be member of a group instead of aws role.

[Ankitha4]

the user is member of the group but he has aws role inherited from the group , but he is not able to see aws events