ACLs for a Scoped Application

[Arijit Saikia]

I have created a Scoped Application with a table called 'Finance' which extends the Task table.
I have created Read, Write, Create and Delete ACLs for the table by assigning a role [finance_user].
I have granted this role [finance_user] to a Group.

When I try to impersonate someone from the group, I notice that some of the inherited fields like 'State', 'Assigned To' etc are read only. Do I need to create separate ACLS for these fields? Else what do I need to update so that the users with the role[finance_user] can update these fields. 

[Rushi Savarkar · Accepted solution]

Hello @Arijit Saikia 

You have to create a total of 4 ACLs -

1 READ and 1 Write ACL's for Additional Comments with finance_user role

1 Read and 1 Write ACL's for Work Notes with finance_user role

[Ankur Bawiskar]

@Arijit Saikia 

if there are specific field level READ and WRITE defined at parent level then you will have to override those by creating new field level READ and WRITE at your table for those fields

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Arijit Saikia]

Thanks @Ankur Bawiskar Ankur, I have created new Field Level Read and Write ACLs for State and Assigned To, they work fine.

However, when I do the same for Work Notes and Additional Comments (Read ACLs) still these 2 fields (Work Notes and Additional Comments) do not appear. Do I need to perform any other action for Work Notes and Additional Comments? Thanks again.

[Ankur Bawiskar]

@Arijit Saikia 

there are parent level READ, WRITE for comments and work notes

So you will have to do the same action for those 2 fields as well.

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Arijit Saikia]

Hi @Ankur Bawiskar  I have created the Read ACLs for Work Notes and Additional Comments, still they are not appearing for the user with the correct role.

[Ankur Bawiskar]

@Arijit Saikia 

are you sure the fields are present on the form view?

Are you sure no other client script or UI policy is hiding those fields?

If my response helped please mark it correct and close the thread so that it benefits future readers.