Issue with ACL on an extended table

Michele22
Tera Contributor

Hi All

i created a scheduled Job that it ran every 5 minutes, for some reason we need to log its activity and we need to fill two custom field (for example the infrastructure).

For that we create a custom table u_my_importer_log that extend syslog.

All is fine, on dev instance works fine, on test instance works fine too, but in production happens a very strange behavior:

 

- the user can access to the custom table but can't see any records (the record counter tell that are present 22k records)

 

- if the same user go to syslog table and filter the data with class "u_my_importer_log" he is able to see the records

 

- even with admin grant the user can't see the u_my_importer_log" records.

 

The access to the custom table should be granted to three roles:

- my_app_admin

- my_app_a_viewer

- my_app_b_viewer

 

I made a new ACL for u_my_importer_log table for operation read for these roles.

it doesn't fix the production issue so after that

I made a new ACL for syslog with condition Class==u_my_importer_log for operation  read for these roles.

it doesn't fix the production issue so after that

I made a new ACL for all fields of u_my_importer_log table for operation read for these roles.

it doesn't fix the production issue so after that

I made a new ACL for all fields of syslog with condition Class==u_my_importer_log for operation  read for these roles.

 

Currently I can't see the needed data on production and I have no Idea related the cause of this issue.

Activating the Security Debug tool I see that the ACL are properly fired I didn't see any issue or any blocking ACL.

 

Please can someone help me or give me any suggestions?

 

Thanks

 

1 REPLY 1

Sandeep Rajput
Tera Patron
Tera Patron

@Michele22 Did you check if you have Admin override checkbox Screenshot 2023-07-23 at 9.43.05 PM.png checked on the ACLs defined for  u_my_importer_log table.

 

Apart from this, have you added 

- my_app_admin

- my_app_a_viewer

- my_app_b_viewer

 

roles in the admin role so that they can pass the role check at the ACL level?