Visibility Issue with Approver Field for External Users in Custom Application Form

[senon]

Hello experts!

■Problem
The problem I have is that when an external user accesses the application's table form from the instance, the approver field is not visible and cannot be accessed.

■Background
- I am thinking of having external users access the instance and use a certain application.
- The application was created using a custom application.
- External users are given the [snc_external] role and an ACL is defined that allows them to access the application.
- The table in the application has a field that references group member [sys_user_grmember]. This is called the approver field.
- We want external users to be able to access this approver field and specify their own approvers.
- There are no UI policies or client scripts that would hide the approver field.

■Guessing the cause
I believe that the reason why the approver field is hidden is related to ACL.

However, I don't know which definition to change to make the approver field appear.

I'm looking for your opinion.

Best regards

senon

[Tai Vu]

Hi @senon 

Have you checked the ACLs on those Approval fields?

If there's no ACLs at field level that was defined to them, you can try to create 3 ACLs for that 3 fields to grant access to the certain role.

Sample

Cheers,

Tai Vu

[Sandeep Rajput · Accepted solution]

@senon Your assumption is correct the fields are not visible because the external user doesn't have read access to User and Group Member tables. In order to grant them the access, you will have to create read ACLs on these tables and allow read access for snc_external user.

[senon]

@Sandeep Rajput 

Your post solved my problem.

thank you very much !!

As per the content of the post, I was able to display the approver field by creating a read ACL definition for the referenced table.

In my case, the solution is to add ACL to the [snc_external] role for verification purposes, but in actual implementation, I believe that ACL should be implemented with specific conditions so that no user record can be accessed.