Understanding ACLs execution plan order

[Leonel Sandroni]

Hi there,

I'm trying to understan how the ACLs are executed and they give permissons to users. 

In my understanding:

1-First ACL is avoided because the current user has no required roles
2-Second ACL is evaluated and the user passes all conditions (roles, conditions filter and script) so he gets permissions
3-Third ACL is not evaluated because the user got permissions by the second ACL so it doesnot make sense

Is that correct? If I needed that the last ACLs be evaluated, I should work with the second ACLs in order to deny permissions, right? and this way the last ACL will be evaluated, right?

I need to know if it is right, no more. 

[Sai Shravan]

Hello @Leonel Sandroni ,

Please find the below SN doc's URL for understanding the ACL debugging tools : 

https://docs.servicenow.com/bundle/vancouver-platform-security/page/administer/contextual-security/c...

[Leonel Sandroni]

I know how to debug security rules works I just need to know what I'm asking for

[Raveena]

Hi Leonel

Yes your understanding is correct.

Please mark this helpful if it solves your query