What is difference between table.none and table.* in ACL? Please explain with an example.

[Tejashvi]

Hii,

What is the difference between table.none and table.* in ACL form ?Please explain with an example.

Thanks in advance!!!

[Kieran Anson]

Hi Tejashvi,

Easiest way to distinguish is one is row level (.none) and one is field level (* or incident.number).

For example, ACL write - incident.none which requires role "ITIL" and a condition of "incident_stateNOT IN7,8^EQ" requires the user to have the ITIL role and the INC not to be in state 7 or 8 (Closed or Cancelled) in order to have write access at record level. If no further ACL's are defined, this user would have full access to the record and update all fields.

For field level, ACL write - incident.state requires the admin role with a condition of "state=7^EQ" meaning if the state is 7 (Closed) then the only user who can update the record state and change it to in progress as an example would be a user with admin role. Even though the ITIL user has full access at row/record level, this ACL prevents access at the particular field level.

[Kieran Anson]

Hi, Checking in on whether my reply resolved your issue? If so please Mark ✅ Correct and /or 👍 Helpful if you find my response worthy based on the impact.
By doing so you help other community members find resolved questions which may relate to an issue they're having.

[Allen Andreas · Accepted solution]

Hi,

For table.none means that you are applying the ACL at the table level.

For table.*, means that you are applying this for all rows/fields on that table which don't have their own specific table.field ACL. So it's more of a "meta-ACL", if you will.

Then there's table.row/field, means you are applying this for that specific field.

For ACLs you first need access to the table, then to the field. Think of it as walking up to a house. You can't get in the house (table) without the door being unlocked. Once inside, the rooms, are the rows/fields. So those need to be unlocked as well to go in to those (table.* or table.row/field).

More discussion found here: https://community.servicenow.com/community?id=community_question&sys_id=fa788feddb1cdbc01dcaf3231f96...

Please mark reply as Helpful/Correct, if applicable. Thanks!

[Allen Andreas]

Hi,

I just wanted to check in on this. If my reply helped guide you correctly, please mark it as Helpful & Correct.

Thank you!