core_company read ACL doesn't work for non admin users

[snow33]

I have a catalog item that has a core_company reference variable. When a test user with no roles tries to populate it, the field returns "no matches found".

I've added an ACL for core_company.* with no roles, no conditions, and no script but the field continues to return "no matches found". When the test user tries to access /core_company_list.do, it gets the the following security debug:

Security constraints prevent access to requested page

---

14:19:48.694: TIME = 0:00:00.000 PATH = processor/GlideAMBProcessor/execute CONTEXT = sys_processor.sys_id=null RC = true RULE =

14:19:49.326: TIME = 0:00:00.000 PATH = processor/RESTAPIProcessor/execute CONTEXT = RESTAPIProcessor Global RC = true RULE =

14:19:50.247: TIME = 0:00:00.000 PATH = processor/GlideServletUITransaction/execute CONTEXT = sys_processor.sys_id=null RC = true RULE =

14:19:50.247: >>> Preceding lines from previous transaction

---

14:19:50.248: TIME = 0:00:00.000 PATH = ui_page/core_company_list/read CONTEXT = sys_user.sys_id=null RC = true RULE =

Is there something I'm missing?

[Ankur Bawiskar · Accepted solution]

Hi Snow3,

You also need to give table level access

create table level ACL i.e. Core Company and none ACL and it should work.

Mark Correct if this solves your issue and also hit Like and Helpful if you find my response worthy based on the impact.
Thanks
Ankur

[Ankur Bawiskar]

Hi Snow3,

Any update on this?
Can you mark answer as correct, helpful and hit like if you were able to achieve the requirement. This helps in removing this question from unanswered list and helps users to learn from your thread. Thanks in advance.

Regards
Ankur

[snow33]

It was fixed by deleting an ACL read RULE that was deactivated and creating a new rule for read all columns.

[Ankur Bawiskar]

Hi Snow3,

Since this is resolved can you also mark my answer as correct, helpful and hit like. This helps in removing this question from unanswered list. Thanks in advance.

Regards

Ankur