Hi @GollaMadhu,
- Incident.none
- manages access to the entire table
- Incident.short_description
- manages access to only this field
- incident.*
- called wild card
- manages access to all the fields except of those that have explicitly record (as the short_description) above
Simplification > Incident has 10 fields where exist:
- incident.short_description
- incident.description
- incident.category
The incident.* will manage the remaining 7 fields (10 without short description, description and category).
Simplification > Incident has 10 fields where exist:
- incident.short_description
- incident.description
- incident.category
- incident.subcategory
- incident.priority
The incident.* manages the remaining 5 fields. Etc.
Be careful. If you will create a new field, it will be automatically getting the access rights from the wild card until it has its own explicit records.
And what was explained above requires operation types. The most common ones are:
- read
- to be able to see that field,
- create
- to create new records,
- write
- to update existing records,
- delete
- to remove records,
Plus, there are some more, such as report viewing or list editing:
To create or modify ACL you need to elevate role to security_admin, standard admin can usually just view it but not more.
ACL can be inherited if a table is extended (e.g. Task > Incident, Task > Problem, ...) or when you create a new table, the basic operations ACLs (CRUD) are automatically created.
Let me know if you have more questins or if it makes sense
