Understanding ACLs execution plan

Leonel Sandroni
Tera Guru

Hi there,

 

I'm trying to understan how the ACLs are executed and they give permissons to users. 

LeonelSandroni_0-1692909082298.png


In my understanding:

1-First ACL is avoided because the current user has no required roles
2-Second ACL is evaluated and the user passes all conditions (roles, conditions filter and script) so he gets permissions
3-Third ACL is not evaluated because the user got permissions by the second ACL so it doesnot make sense

Is that correct? If I needed that the last ACLs be evaluated, I should work with the second ACLs in order to deny permissions, right? and this way the last ACL will be evaluated, right?

2 REPLIES 2

Akanksha Gupta2
Mega Guru

Hi Lenonel,

 

Kindly go through these links, this will help you understand execution of ACL.

 

https://www.servicenow.com/community/grc-forum/order-of-execution-of-an-acl/m-p/1311960

https://www.basicoservicenowlearning.in/2021/08/acl-in-servicenow.html

 

If I'm able to help your question ,please mark my answer correct or helpful.

 

Regards,

Akanksha