current.canWrite does look where exactly in ACL?

[ehgebla]

Hey everyone,

short question on Scripts together with ACL. We do have our update incident inbound action script that will update the current.comments whenever a mail is received and adds that mail.

This shall work everytime, regardsless if the user is the opener or in watchlist. Our user in watchlist CAN update the record in portal, but for some reason the script doesn't add the comments whenever a user in watchlist answers on the records.
I mean the mail do is in the history of the ticket, but the mail doesn't get copied to the additional comments as the script tells it to be. 

The received mail tells me: Update Incident : did not create or update incident using current

The script in question ends with 

if (current.canWrite())

        current.update();

}

so I was thinking it might has to do with the ACL's. However, I checked the incident table and write for incident as well as incident.comments is allowed for people in watchlist (which is why they also are allowed to update in portal, I suppose).
So how does the script decide who CAN write and updates?
What ACL will be triggered here?

Anyone has any idea? Maybe I am also overlooking something.

Regards

Elena

[Sandeep Rajput]

@ehgebla Since you are checking current.canWrite(), the write ACL on the respective table would be checked. If the user doesn't have the write access on the record, the ACL would get failed and the record would not get updated.

[ehgebla]

Hi Sandeep, it's on incident table and the watchlist user do have write access. Both to incident as well as incident.comments in ACL. It still fails.

[Sandeep Rajput]

@ehgebla According to definition 

canWrite()

Determines if the access control rules (which includes the user's role) permit updates to records in this table.

Returns

Type	Description
Boolean	Flag that indicates whether the user's roles permit writing of records in this table. Valid values: true: Writing permitted false: Writing is not permitted

please use the ACL debugger to identify which ACL is failing.

[shyamkumar VK]

@ehgebla  , Basically ACL Validates Based on Logged In user and you current Script is Validating if Current user can Include Comments or not - Check if this ACL has some Roles like ITIL , Admin etc. so based on that roles validation ACL allows Access 

Note : ACL Works Same as native UI in portals , Workspaces everywhere.

Regards,

Shyamkumar