how i can create ACL for write on ONE field only

Saif Al-Bashiti
Mega Expert

Hello everyone 🙂 

I have user name : TRAVEL , this User have roles includes one role ( TRAVEL.ME ) .. OK ? 

OK .. this TRAVEL User can only READ Record with state = Approve .. no problem here 🙂 

but these TRAVEL can only write on the record when the state = approve && CAN ONLY CHANGE(Write) THE STATE FIELD 

How I can do this plan ? please help me and save my day 

thanks 🙂 

1 ACCEPTED SOLUTION

Tim Provin
Mega Guru

Are there any other roles that need access to write to this table?  I'm assuming the answer is yes, so we have to ensure that we keep their access while limiting the access for your TRAVEL.ME role.

  1. Create (or update an existing) table level write ACL so that it includes the TRAVEL.ME role
  2. Create a table.state field level write ACL for the TRAVEL.ME role
  3. Restrict write access to all other fields ... This is the tricky part, and I can't give you the exact answer.  If you currently only have table level ACLs, then you can assume that any other role has access to write to all fields and you can create a table.* field level write ACL for the role(s).  If you already have field level write ACLs, then it is safe to assume that you already have what is needed to restrict the access, and most likely do not need to do anything here.

View solution in original post

2 REPLIES 2

Tim Provin
Mega Guru

Are there any other roles that need access to write to this table?  I'm assuming the answer is yes, so we have to ensure that we keep their access while limiting the access for your TRAVEL.ME role.

  1. Create (or update an existing) table level write ACL so that it includes the TRAVEL.ME role
  2. Create a table.state field level write ACL for the TRAVEL.ME role
  3. Restrict write access to all other fields ... This is the tricky part, and I can't give you the exact answer.  If you currently only have table level ACLs, then you can assume that any other role has access to write to all fields and you can create a table.* field level write ACL for the role(s).  If you already have field level write ACLs, then it is safe to assume that you already have what is needed to restrict the access, and most likely do not need to do anything here.

Hi Tim provin,

thanks for your response , now its work fine 🙂 

you Saved my day , thanks again