End user access to Application services table

[AnirudhKumar]

Hi Folks!

I have a record producer that creates an incident.

There is a field on the incident called Application affected that should show a list of Application Services (reference to cmdb_ci_service_auto table).

Is it ok to create an ACL and open up access to Application Service table to all users?

Do you think there's a better design / or rethinking the problem? 

[Ravi Chandra_K]

Hello @AnirudhKumar 

Greetings!

we had similar requirement. If the list has to be visible on form, read ACL has to be provided.

what you can do is to further restrict backend access, make sure the module is not visible to the users from native view.

Please hit the thumb and Mark as correct based on Impact!!

Kind Regards,

Ravi Chandra.

[BharathChintala · Accepted solution]

@AnirudhKumar  Only Read ACL is recommended.

That is the standard process everyone follow. If you have sensitive data in any fields. Create field level read acl to restrict those.

Apart from that nothing else you need to worry.

there is another thing you can create for all user open table read access and give only access basic fields line name and description. With other regular roles they can see everything.