What happens when you have conflicting ACLs?

joshua18
Giga Expert

If you have an ACL that has a script that results true but a second ACL that results in false, does the fault (deny) take priority?

1 ACCEPTED SOLUTION

I figured out that I needed to create a table-level ACL for what I was trying to accomplish.

Also, that picture is what made me post this question. It doesn't consider multiple ACLs, but I decided to read that page again thoroughly, and I initially skipped over the section that goes over multiple ACLs.

 

If multiple ACLs are present for incident.number, a user only has to pass one ACL to get access to that field.

View solution in original post

3 REPLIES 3

I figured out that I needed to create a table-level ACL for what I was trying to accomplish.

Also, that picture is what made me post this question. It doesn't consider multiple ACLs, but I decided to read that page again thoroughly, and I initially skipped over the section that goes over multiple ACLs.

 

If multiple ACLs are present for incident.number, a user only has to pass one ACL to get access to that field.

Praveen122
Tera Contributor

If a user does not meet the permissions of the first matching rule, the system evaluates the permissions of the next matching access control rule as specified by the access control processing order. If the user fails to meet the permissions of any matching access control rule, the system denies access to the requested object and operation.