The Zurich release has arrived! Interested in new features and functionalities? Click here for more

Deny-Unless ACL Applying in an Unexpected Manner

Luke54
Tera Expert

Have kind of a weird quandry here. 

 

We have several modules installed, lots of scoped apps, etc. Most recently going live with Legal Service Delivery. no issues in our sub-prod instances, but after installing the plug-ins in production, individuals are getting security denied when attempting to access or view the Task [task] table. 

 

The logs show that a deny-unless ACL is preventing any user from accessing or viewing the Task table. The ACL is configured per the out of box plugin configuration. 

Luke54_0-1758292529874.png

 

No noticeable differences between sub-prod and production, but when this ACL is active in production, it prevents individuals from viewing a list view of all tasks. 

 

Screen shot of debugger from production when going as a 'standard user' to task.list yields a 'can't access due to security error'

Luke54_1-1758292669027.png

 

Same user, same permissions, ran in sub-prod. 

 

Luke54_2-1758292763171.png

Disabling the ACL in production allows everything to work as expected. 

 

Seems off to me, because it would be my understanding that the task list would still load, but would only see records you were allowed to see, but not necessarily torpedo the whole list from loading.

 

Done a few things like cleared cache with cache.do, checked cross scope priveleges, all seems the same as our sub-prod instances, so I'm curious as to why the difference in application between the environments. Instances are the same patch level, plugins are the same version, etc. Equally frustrating is no matter what I do in sub-prod, I can't seem to get it to behave how it is in production. 

 

Anyone have any ideas or seen something similar like this?

 






0 REPLIES 0