which acl will work, if conditions are same?

[Saranya2]

Hi All,

I want to know which acl should work if the conditions are same for the 2 different acls

for eg:

            1st ACL - same condition, making the field invisible

            2nd ACL - same condition, making the field visible

so which acl will apply in this case?

Thanks,

Saranya

[Dr Atul G- LNG]

Hi @Saranya2 

My thought, ACL which created later will override the first one. 

[Maddysunil]

@Saranya2 

I think 2nd ACL - Field will be visible as if two ACL conflict then it works as OR operator and gives the access.

Please Mark ✅Correct if this solves your query and also mark 👍Helpful if you find my response worthy based on the impact.

Thanks

[Kieran Anson]

Can you share a screenshot of the ACLs? ACLs don't explicitly restrict, they work on a grant base model with a default deny policy in SN. So if you have two ACLs with the same condition, they should both be granting 

[Shaqeel]

Hi @Saranya2 

If the 2 ACLs have same condition, the one that is more specific will and if they are equally specific the system will apply the rule that denies access, this is due to servicenow "implicit deny" security model, where access is denied if no rule explicitly allows it.

Regards

Shaqeel