Dos the parent table ACL restrict access to child table?

[lathashree]

Does the parent table ACL restrict access to child table? For example, pm_program is given access to program_manager role, now the extended table, pm_extended_program table does not allow users without program_manager role to access the extended table. Is this right?

[#2]

Hey,

Refer below links, you will definetly get what you are searching for:

https://community.servicenow.com/community?id=community_question&sys_id=a461d72ddbdcdbc01dcaf3231f96191f

https://docs.servicenow.com/bundle/jakarta-servicenow-platform/page/administer/contextual-security/concept/access-control-rules.html?title=Using_Access_Control_Rules

Please mark if helpful

Thankyou

[Ashvini Kadus1]

Hi lathashree,

As per my understanding it is right because the rule says,

If other tables extend from this table, then the table is considered a parent table. ACL rules for parent tables apply to any table that extends the parent table.

[Ashutosh Munot1]

Hi,

This is a bit confusing thing. What happens is it use's a principal of Inheritance.

Suppose you have a Read ACL on child table and One More Read ACL on Parent table then by default it should provide a access to child table.

Consider another case:

You have a write ACL on state field on parent table for manager and no ACL on child table then also it will get applied to child table if this field is inherited from parent.

This is what my understanding is:

First Child table field and table level acces is  check then parent. See below:

Field ACL rules are processed in the following order:

1. Match the table and field name. For example, incident.number.
2. Match the parent table and field name. For example, task.number.
3. Match any table (wildcard) and field name. For example, *.number.
4. Match the table and any field (wildcard). For example, incident.*.
5. Match the parent table and any field (wildcard). For example, task.*.
6. Match any table (wildcard) and any field (wildcard). For example, *.*.

Thanks,
Ashutosh Munot

[Supriya Sirse1]

Hi,

Yes parent table ACL restrict access to Child Table.

as per you example you pm_program is a Parent table and having program_manager role. ACL's are applied to the pm_program table.

Now you have extended this with pm_extended_program i.e. child table. so you have to give the program_manager role to extended table.

This may help you.

Regards,

Supriya S.

Kindly Hit  Helpful, Reply,Mark as Correct Answer if you found useful.