ACL

[roomawakar]

Hi All,

I have a request to make a field visible only if the user is having ITIL or admin role and if the class is cmdb_ci_appl, u_cmdb_ci_saas_application and cmdb_ci_service_discovered.

I have written an ACL to allow the read operation only if the class name is cmdb_ci_appl, u_cmdb_ci_saas_application and cmdb_ci_service_discovered and the roles are ITIL and admin, but this isn't working.

Can someone please help where I am doing wrong.

Screenshot attached.

Thanks,

Rooma

[J Siva]

@roomawakar 

Since you are creating this acl directly in the cmdb_ci table, the child table acl might be overriding this.

So create "Deny unless" ACL on each ci class separately.

[roomawakar]

@J Siva This one isn't working as well.

[Ankur Bawiskar]

@roomawakar 

Is that a custom field?

Use OR instead of AND as you want to check either of those tables

Otherwise it's good.

If my response helped please mark it correct and close the thread so that it benefits future readers.

[roomawakar]

Hi Ankur, Yes it is a custom field. I made the changes as suggested but isn't working.

[Ankur Bawiskar]

@roomawakar 

Did you check which ACL is blocking?

Did you check that using access analyzer?