ACL

[HameetK]

Hi,
I have a parent table with default ACLs (CRUD) grating access for role 'u_test'. There is a child table inheriting from parent table with default ACLs (CRUD) grating access for role 'u_test1'.
However, parent table has one extra [parent.*] ACL grating access for role 'u_test'.

User with 'u_test1' role is not able to see any fields (not even child table fields) on the child table.
Is [parent.*] ACL restricting the field on child table? If yes, please elaborate.

[Tanushree Maiti]

In ServiceNow, parent-level wildcard (.*) ACLs apply to all fields on the parent table AND inherited tables (child tables).
Since the user at child-level lacks u_test, they fail the parent wildcard check, denying field access even if the child table has its own CRUD rules.

Possible fix could be

1. Add a child.* ACL //overrides the inherited parent.* restriction for the child table

OR

2. Add u_test1 to the parent.* ACL

[HameetK]

Hi @Tanushree Maiti 
So, will the parent-level wildcard (.*) also restrict the fields on the child table?

[Tanushree Maiti]

Yes , it restricts.

[Vishal Birajdar]

Hi @HameetK 

You can use Access Analyzer and check which ACL is blocking the access.