User able to export the records data even after acl is evaluating false

[Chaitanya naram]

Hi Folks,

I am seeing a strange behavior in exporting data functionality. We do have a Query business rule on cmdb_ci table and the users were successfully blocked from seeing the data not relevant to them. But while exporting the data into excel sheet, they can able to see all the records which were not visible in the list view because of query business rule.

Now, I have created an ACL with the same logic what we have in the query business rule and I also provided a log statement inside script section. While user performed export excel, the acl is evaluating and I can see "answer of acl is false" for those records to which the user should not have any visibility. But still the user can able to see those data in excel sheet even the acl evaluated those as restricted (answer to false)

Can anyone know what might be the root cause?

[Ankur Bawiskar]

@Chaitanya naram 

did you check by creating another custom table?

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Ankur Bawiskar · Accepted solution]

@Chaitanya naram 

it worked for me in normal table list

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Chaitanya naram]

Its because of there are child acls on the CI classes that takes precedence while execution.