Hi everyone,
I’m working on an HRSD requirement where the Delete option must be disabled for HR tasks associated with specific HR Services — Parental Leave, Global Parental Leave, and Managing Performance Improvement.
I created a new record ACL on sn_hr_core_task for the delete operation using Allow If logic. My ACL checks the parent HR Case → HR Service and returns false for these three services, and true for all others.
However, when I debugged using Security Rules Debug, I found that another existing Allow if ACL (created by a previous admin) still returns true for the MPI tasks. Because of that, the delete option is still visible.
My question:
How can I properly override that existing Allow-if ACL so that delete is blocked for the specific HR services, without modifying or deleting the admin ACL?
