ACL not working on field

[Darren22]

Good morning all,

I've been tasked with locking down our short description on the incident form and so opted for an ACL to do so. When I set the ACL to work on the DESCRIPTION field it works perfect. If the incident is new, then you can edit it but the moment you save the record its no longer able to be edited.
So that works lovely, but the issue I'm having now is that if I change the field to be SHORT DESCRIPTION the ACL doesn't work.

The only difference I can see between the two fields is that the short description is set to Mandatory but the description isnt. I also noticed when I apply the changes, the Description is changed at incident level but the short description is at task level.
What sort of things should I be looking for? I don't want to apply the ACL at task level as it will then impact change etc so it needs to be incident level.

Any shots in the dark as to what I could be looking for or is it the mandatory aspect impacting this?

[Ankur Bawiskar]

Hi,

for short_description did you create fresh ACL on incident table or modified the task one?

is the field mandatory at dictionary level? if yes then possibly ACL cannot restrict from editing

try checking for some other field as well.

Regards
Ankur

[Darren22]

Thanks for the reply,

I created a fresh new ACL on the incident table. I also just checked and the field isn't set to mandatory nor is there a dictionary override to set it as mandatory. So I assume there is a UI or data policy making it mandatory.

Its pretty much out the box so I don't think we have ever made a change to make it mandatory and was just out the box.

UPDATE: Just checked that there is a UI Policy making it mandatory in all states. If I set this UI policy to inactive and change the ACL to short description it still doesnt work.

This doesnt add up

[Darren22 · Accepted solution]

I managed to figure out what the issue was. There are two out of the box ACLs which allow the short description to be amended. We would have to either set these to inactive or amend them for this to work.

I'm not happy about amending two out of the box ACLs for this reason so will go back and inform the department

[Mahesh Baraska2]

You have to create the "write ACL" for "Short Description" field on incident table.  incident.short_description and give some OOB role to it like "admin".  So, after the report gets created, the field will not be able to be edited by any other user other than Admin.