
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-06-2017 09:20 PM
Hello I want to restrict bulk update of one field in list view. But I want to allow users to update only one record in list view at a time. If he/she uses to update multiple records in list view it should not be allowed. Can somebody please help in this issue.
Thanks,
Saurabh
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-06-2017 10:59 PM
That's really interesting requirement. You have to allow list editing by having list-edit ACLs returning true - otherwise users won't be able to update field values in list. However in those ACLs you don't know if it is being updated as part of multiple records or not as you still have just "current" object. One work-around could be to use "onCellEdit" client scripts where you could check if there is only one (then allow) or more sysIDs (then restrict) selected (Client script types ). The problem is that this is not real security as it could be avoided - it checks only on client, not server side. So it depends how critical it is to restrict it or if it is more just user guidance to avoid mistakes using list editing.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-06-2017 09:39 PM
Hi Saurabh,
We have one role list_updater role , all users with this role can bulk update list view. Try writing ACL with gs.hasRoleExactly return false for that field. This is just an idea this should help you to start.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-06-2017 10:59 PM
That's really interesting requirement. You have to allow list editing by having list-edit ACLs returning true - otherwise users won't be able to update field values in list. However in those ACLs you don't know if it is being updated as part of multiple records or not as you still have just "current" object. One work-around could be to use "onCellEdit" client scripts where you could check if there is only one (then allow) or more sysIDs (then restrict) selected (Client script types ). The problem is that this is not real security as it could be avoided - it checks only on client, not server side. So it depends how critical it is to restrict it or if it is more just user guidance to avoid mistakes using list editing.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-07-2017 05:53 AM
Hello Dominic,
The workaround for on cell edit client script is working fine. But as you said I will still try to implement it with ACLS.
Thank you so much,
Saurabh
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-11-2018 10:02 PM
Hi Saurabh,
Were you able to achieve the solution for this using ACL ?