What is an ACL? What is the significance of "answer = false" in the ACL script.

[Hrishabh Kumar]

I have Attached the screenshots of an ACL, With reference to the screenshot I need the following answers.

1) What does this ACL do?

2) What is this roles required?

3) What is the meaning of "answer = false" in the ACL script?

[SoniaShridhar13]

@Hrishabh Kumar  If  "answer=true" It will be editable for all users, if answer = true in the script.

[Hrishabh Kumar]

all the user except with "cmdb_read" and "itil" role ? or for every user?

[SoniaShridhar13]

If you add a role in the roles section, assuming ITIL Role:

only ITIL users can edit the field, if answer = true in script

No user even with ITIL Role can edit the field , if answer = false in script

[SoniaShridhar13]

That would imply that no one (even admin if admin override is not checked) has write access to that specific field.

Please mark it helpful if it helps

[Hrishabh Kumar]

that means right now no user have permission to write data in "cmdb_ci_cloud_service_account" table? because the script returns false. 

And if we replace "answer=false" to "answer=true" only "itil" and "cmdb_read" will be able to write data in that table. right?