How the visibilty of interaction records is controlled in Human Resource Core Application scope

[Vdevmat33]

Hi Team,

Could you please suggest how the visibilty of interaction records is controlled in Human Resource Core Application scope.

For example, only user with HR Admin role can view the records in Human Resources Core application scope. Observed that there no acl or business rule on interaction table which suggests same.

Would like to know how this is implemented and what configurations are used here.

We were planning to implement same for other custom application.

Thanks in advance!

[Vdevmat33]

User who is unable to view the record has sn_hr_core.case_reader role.

User with sn_hr_core.admin role is able to view the records

[Kieran Anson]

What's the value in the application field of the interaction record (assuming this is a single record that is impacted).

It should be "Agent Workspace for HR Case Management"

[Vdevmat33]

The application field contains "Human Resources: Core"

All the records with this application scope in interaction table are not visible for user

[Kieran Anson]

Having sn_hr_core.case_reader should be sufficient to as there is an OOB ACL 'c2f9a09e93b41210be5b8750348918a3' to grant read access.

Are you impersonating them to check this issue? Because if 

sn_hr_core.impersonateCheck is set to true, the ACL won't pass because impersonating checking is enabled.

Otherwise, the user also needs interaction_agent

[Ankur Bawiskar]

@Vdevmat33 

did you check the table.None READ ACL on that table?

the user you are testing with has which role?

If my response helped please mark it correct and close the thread so that it benefits future readers.