ACL

[CV1]

Hi All,

Please explain difference and when to use

Sample ACL :

• customer_project
• customer_project*
• customer_project.state

When a "read" acl is created on table(customer_project) for a role "role_a" , then all the users with " role_a" will be able to view the data for the table. Why do we need to create a field level acl  (customer_project*) when this also allows the role to be able to view all the fields?

TIA

[SanjivMeher]

• customer_project
• customer_project*
• customer_project.state

All of the above are important. When customer_project ACL is created it provide access to all the fields. A field level ACL is required, when you want to restrict users from seeing a field. For ex, Exceptions....I want only few fields to have write access to to Exception owner, but I want the exception manager to be able to write to certain fields...I would then create the field level ACLs.

[Shubham Singh]

Hi @CV1 

• customer_project will provide only table level access not field level access.
• customer_project.* will provide field level access. It provides access to all the fields on the table.
• customer_project.field_name is basically used to control the access of a particular field not all fields.

Hope now you got a clear idea on this 🙂

Thanks!

Please mark this response as correct and helpful ✔️👍