Field ACL not being evaluated

Liam Rhodes
Kilo Guru

Hi all, looking for a bit of clarity concerning an issue I'm facing.

The cmdb_software_product_model table is shut down with an ACL so that only users with the model_manager role can edit records on here. I believe this has come OOTB.

find_real_file.png

However we have two custom fields on this table, one of which is called ad_group which we want to open up to be editable by users with a separate role which I have created called software_manager_approver as below.

find_real_file.png

This issue I'm having is that the second ACL at the field level is not even being evaluated because the user does not pass the first ACL of having the model_manager role. It was my understanding that field ACL's would be evaluated before table ACL's - is this not the case or have I misunderstood?

find_real_file.png

If this is the case then my understanding is that I need to open up the entire table by making the table ACL inactive and then lock down each field individually (which is a pain as there's a far number of fields to lock down but if that's what needs to be done then so be it). Any advice would be greatly appreciated!

 

1 ACCEPTED SOLUTION

Chandu Telu
Tera Guru
Tera Guru

Hi 

Check the below image and check the below link

https://servicenowhelpdesk.com/access-control-list-acl/#:~:text=ServiceNow%20uses%20access%20control%20list,protocols%20such%20as%20web%20services.

find_real_file.png


Please Mark the answer if correct/helpful , if it helps

View solution in original post

2 REPLIES 2

Chandu Telu
Tera Guru
Tera Guru

Hi 

Check the below image and check the below link

https://servicenowhelpdesk.com/access-control-list-acl/#:~:text=ServiceNow%20uses%20access%20control%20list,protocols%20such%20as%20web%20services.

find_real_file.png


Please Mark the answer if correct/helpful , if it helps

Thanks Chandu, that makes sense with what I'm seeing. Thanks for your help!