- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-24-2016 06:23 AM
I have created an account (websvcusr).
This account has roles (web_service_admin and rest_service).
I would like to give the websvcusr account READ ONLY access to all of our tables...however the only way I have found to do this is by creating an ACL for each table granting READ access for the following condtion:
gs.hasRole('web_service_admin') && gs.hasRole('rest_service');
Is there any other way to give this account READ ONLY access other than having to create and ACL for each table?
Solved! Go to Solution.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-24-2016 06:31 AM
You can add "snc_read_only" and "itil" Roles to user account. That will give websvcusr same access itil user but read only.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-24-2016 07:03 AM
I'm glad I was able to help
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-21-2016 12:22 PM
Hi Tim,
Would it be possible granting a snc_red_only role to a user, and still open to few selected fields to write on a record (lets take incident table)
Scenario : user has snc_read_only and itil role, so when he opens a incident record it will read only, but we want to enable write operation to few fields like short description and additional comments.
I tried having additional ACLs but snc_read_only take the final call and shows read only view of the record.
how can we achieve this? Appreciate your assistance in advance, thx
regards,
Durga.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-21-2016 12:31 PM
Durga,
I don't think this is possible, as the 'snc_read_only' role implies a read only restriction across the tables. You would need to create a separate role, and give that role read access to the table, and write access to the specific fields you mentioned. In this case, that user account would not require the itil or snc_read_only roles, as the read/write access will be controlled via the new role you create.
Hope that helps.
Cheers,
Tim