Deny-Unless ACL Applying in an Unexpected Manner
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
4 hours ago - last edited 4 hours ago
Have kind of a weird quandry here.
We have several modules installed, lots of scoped apps, etc. Most recently going live with Legal Service Delivery. no issues in our sub-prod instances, but after installing the plug-ins in production, individuals are getting security denied when attempting to access or view the Task [task] table.
The logs show that a deny-unless ACL is preventing any user from accessing or viewing the Task table. The ACL is configured per the out of box plugin configuration.
No noticeable differences between sub-prod and production, but when this ACL is active in production, it prevents individuals from viewing a list view of all tasks.
Screen shot of debugger from production when going as a 'standard user' to task.list yields a 'can't access due to security error'
Same user, same permissions, ran in sub-prod.
Disabling the ACL in production allows everything to work as expected.
Seems off to me, because it would be my understanding that the task list would still load, but would only see records you were allowed to see, but not necessarily torpedo the whole list from loading.
Done a few things like cleared cache with cache.do, checked cross scope priveleges, all seems the same as our sub-prod instances, so I'm curious as to why the difference in application between the environments. Instances are the same patch level, plugins are the same version, etc. Equally frustrating is no matter what I do in sub-prod, I can't seem to get it to behave how it is in production.
Anyone have any ideas or seen something similar like this?