One ACL making field read only and other making field editable on form , which one will apply ?

[KS86]

Hi Community,

Can anyone explain above scenario?

Is there any order or logic which applies while evaluating this kind of scenarios? 

[Robert H]

Hello @KS86 ,

It depends on the configuration of your ACLs, and the current user.

Write ACLs make a field editable when the current user passes the condition/role/script check defined in the ACL.

If you have multiple write ACLs for the same field and the user passes at least one of them the the field will be editable, else it will be read-only.

It gets more complex if you have a combination of "Deny unless" and "Allow if" ACLs involved. If the user does not pass the  "Deny unless" ACL then the "Allow if" ACL won't be checked.

These are the general rules. If you can share screen shots of your two ACLs you can get a more precise answer.

Regards,

Robert

[J Siva]

Hi @KS86 

grammar record

There isn't a specific ACL to make fields read-only.

If the currently logged-in user meets the field-level write/create ACL (for new records), they can edit the field. Otherwise, the field remains read-only.

Additionally, "Deny-Unless" type ACLs take precedence over "Allow If" type ACLs. Therefore, if a "Deny Unless" ACL has been configured, users must satisfy its conditions to gain access.

Hope this helps.
Regards,
Siva

[SumanthDosapati]

@KS86 

User will be able to edit field if they qualify at least one ACL even though other ACLs restrict.

Hope the above answer should solve your query.

If not, please explain clearly on what do you mean by making field ReadOnly via ACL? 

Accept the solution and mark as helpful if it does, to benefit future readers.
Regards,
Sumanth