Allow access to do Journal Input without write ACL

arabeau
Kilo Contributor

Hi All,

I have a case where i want to provide users journal input access (as well as add attachments) on a record without giving them the write ACL to the table - mostly because giving them the write access also enables the update/save UI actions - I'd rather not modify these OOTB global ui actions

anyone have any ideas on how to do either of the following?

1) allow write access only to the journal input field and/or to add attachments without giving users the write ACL (i tried field level ACLs to no avail)

-or-

2) giving users write access to enable journal input and/or to add attachments but hide the UPDATE/SAVE UI Actions without modifying the OOTB Global UI Actions

i think i could probably just create a copy of the global table UI actions and modify it to not apply to certain tables, but im wondering if there is any other or better way?

any help would be greatly appreciated! I've scoured the internet in hopes of figuring it out but no luck yet...

 

thanks!

1 ACCEPTED SOLUTION

Brian Lancaster
Tera Sage

You cannot give filed level ACLs without giving table level ACLs.  So you have to give write to the entire table but then use filed level ACLs to make it so that it restricts them to only the fields you want.  You would may then need to create a UI action on the specific tables copying the global ones.  I don't think there is any other way to do this.  

View solution in original post

2 REPLIES 2

Ankur Bawiskar
Tera Patron
Tera Patron

Hi,

Field level ACL should solve this by giving proper condition and roles.

Can you debug the ACLs and check which is not allowing it to save.

Regards

Ankur

Regards,
Ankur
✨ Certified Technical Architect  ||  ✨ 9x ServiceNow MVP  ||  ✨ ServiceNow Community Leader

Brian Lancaster
Tera Sage

You cannot give filed level ACLs without giving table level ACLs.  So you have to give write to the entire table but then use filed level ACLs to make it so that it restricts them to only the fields you want.  You would may then need to create a UI action on the specific tables copying the global ones.  I don't think there is any other way to do this.