Issue with ACL on an extended table

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-23-2023 08:00 AM
Hi All
i created a scheduled Job that it ran every 5 minutes, for some reason we need to log its activity and we need to fill two custom field (for example the infrastructure).
For that we create a custom table u_my_importer_log that extend syslog.
All is fine, on dev instance works fine, on test instance works fine too, but in production happens a very strange behavior:
- the user can access to the custom table but can't see any records (the record counter tell that are present 22k records)
- if the same user go to syslog table and filter the data with class "u_my_importer_log" he is able to see the records
- even with admin grant the user can't see the u_my_importer_log" records.
The access to the custom table should be granted to three roles:
- my_app_admin
- my_app_a_viewer
- my_app_b_viewer
I made a new ACL for u_my_importer_log table for operation read for these roles.
it doesn't fix the production issue so after that
I made a new ACL for syslog with condition Class==u_my_importer_log for operation read for these roles.
it doesn't fix the production issue so after that
I made a new ACL for all fields of u_my_importer_log table for operation read for these roles.
it doesn't fix the production issue so after that
I made a new ACL for all fields of syslog with condition Class==u_my_importer_log for operation read for these roles.
Currently I can't see the needed data on production and I have no Idea related the cause of this issue.
Activating the Security Debug tool I see that the ACL are properly fired I didn't see any issue or any blocking ACL.
Please can someone help me or give me any suggestions?
Thanks

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-23-2023 09:15 AM
@Michele22 Did you check if you have Admin override checkbox checked on the ACLs defined for u_my_importer_log table.
Apart from this, have you added
- my_app_admin
- my_app_a_viewer
- my_app_b_viewer
roles in the admin role so that they can pass the role check at the ACL level?