difference between * and none in acl

snow3
Kilo Contributor

i have gone through the community links too but still i didnt get the difference between record level "none" and wildcard "*"

can anyone explain with the scenerio..

1 ACCEPTED SOLUTION

Pooja Mallikarj
Kilo Sage

Hi,

Table.*  is a field level ACL which gives Access to all field on that table.

Table.none  is a row level ACL which allows you to access records.

Both are table level ACL, But the thing is * is a wild card entry. Suppose None is restricting table level access and you provide access by using * , system can allow you to do the work.

 

Examples:

If you define a READ ACL with:

•Table.None for Admin & ITIL

Result: Both Admin and ITIL will be able to view all records because they have read access to all records with no field restrictions.

If you define a READ ACL with:

•Table.None for Admin & ITIL & Table.* for Admin

Result: Only Admin will have read access because the Table.* is an explicit rule at the field level that grants only Admin read access to all fields.

If you define a READ ACL with:

•Table.None for Admin & Table.* for ITIL

Result: ITIL will not be able to view any records because they only have read access at the field level and not at the Record/Row level.

*.* represents = all records in all tables.all fields in a record

 

Please mark it as helpful/correct if it helps for you.

 

Regards,

Pooja

View solution in original post

4 REPLIES 4

sachin_namjoshi
Kilo Patron
Kilo Patron

Please see answer below

 

https://community.servicenow.com/community?id=community_question&sys_id=fa788feddb1cdbc01dcaf3231f961966

 

Regards,

Sachin

i have gone through that link too still i didnt get it..

Pooja Mallikarj
Kilo Sage

Hi,

Table.*  is a field level ACL which gives Access to all field on that table.

Table.none  is a row level ACL which allows you to access records.

Both are table level ACL, But the thing is * is a wild card entry. Suppose None is restricting table level access and you provide access by using * , system can allow you to do the work.

 

Examples:

If you define a READ ACL with:

•Table.None for Admin & ITIL

Result: Both Admin and ITIL will be able to view all records because they have read access to all records with no field restrictions.

If you define a READ ACL with:

•Table.None for Admin & ITIL & Table.* for Admin

Result: Only Admin will have read access because the Table.* is an explicit rule at the field level that grants only Admin read access to all fields.

If you define a READ ACL with:

•Table.None for Admin & Table.* for ITIL

Result: ITIL will not be able to view any records because they only have read access at the field level and not at the Record/Row level.

*.* represents = all records in all tables.all fields in a record

 

Please mark it as helpful/correct if it helps for you.

 

Regards,

Pooja

admin does not have access here either right::

 

•Table.None for Admin & Table.* for ITIL

Result: ITIL will not be able to view any records because they only have read access at the field level and not at the Record/Row level.

*.* represents = all records in all tables.all fields in a record