How to bypass ACL for list_update functions?

[gavinteo]

Hi,

I am trying to grant some users in my organizations to have the access to do a mass update using the OOB "Update Selected" or "Update All" functions. I have granted them the list_updater rights and they are able to see the functions.

However, while trying to update using the "Update Selected" or "Update All" functions, I found that the users do not have access to view the fields that allows them to key in the "new" values.

This is because there is a record ACL for read operation that checks if user should have access to read the fields.

As the update UI does not have any values, this below ACL denies the user the read access to the record. Is it possible for me to bypass the ACL for the 2 update functions similar to the code to check if its a new record?

sample ACL for the read operation as shown below;

//global in scope check

if(current.isNewRecord() || current.sys_domain == 'global')

  answer = true;

else{

  var service = current.u_ci;

  var subcat = current.u_ci.subcategory;

  var company = current.u_ci.company;

  answer = DataVisibilitySecurity.canViewRecord(service,subcat,company);

}

Thanks in advance!

[rajmasurkar]

Hi Gavin,

I would advice you instead of trying to bypass the ACLs, create a role for the users who need to mass update.

And then add this role to those read ACLs.

Does that make sense?

Raj