In Project Management there is a parent/child relationship between a Project (pm_project) and Project Task (pm_project_task). On a Project Task list view I have added 'Parent.Short Description', which is the project name for the top-level tasks directly below a project.
As an Administrator I can view the contents of that field in list view.
A user with the project_user role, who is able view all projects and tasks, does not see any data in that column.
I enabled Debug Security and what it is showing is it is failing the script evaluation on a high-level read ACL that applies to all records
The script says you must either be an admin or the default security mode is allow (the default mode is deny).
Script: gs.hasRole('admin') || gs.getProperty('glide.sm.default_mode') == 'allow'
Users with the project_user role have full read access to all fields in the pm_project table, as seen here when the same non-admin user views all projects.
So why is this read ACL on pm_project.* being bypassed when dot-walking from pm_project_task up to pm_project?
Thanks,
Michael Mongeau
Stratus Technologies
ServiceNow CA/CAD
There is already a record-level read ACL on the pm_project table (field = 'None') and it does not seem to make a difference.
Michael
