ACL

[abhisek]

Hi All,

I have created a custom table and by default read, write, create and delete ACLs are created as per OOB functionality. The requirement is: (1) only my group should be able to read, write, create and delete access to this table.

                                  (2) ITIL user must have read access only.

                                  (3) Admin user must have create, delete and write access.

Could you please help me out.

Thanks&Regards,

Abhisek Chattaraj.

[Ankur Bawiskar · Accepted solution]

@abhisek  

then do this

1) create a group and give role to it

Changes required

(1) only my group should be able to read, write, create and delete access to this table. - give the above role in roles section of the OOB 4 Table ACL

(2) ITIL user must have read access only. -> give itil role in roles section for table.None READ ACL

(3) Admin user must have create, delete and write access. -> use admin overrides checkbox in table.None CREATE, DELETE and WRITE ACL

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Ankur Bawiskar · Accepted solution]

@abhisek  

then do this

1) create a group and give role to it

Changes required

(1) only my group should be able to read, write, create and delete access to this table. - give the above role in roles section of the OOB 4 Table ACL

(2) ITIL user must have read access only. -> give itil role in roles section for table.None READ ACL

(3) Admin user must have create, delete and write access. -> use admin overrides checkbox in table.None CREATE, DELETE and WRITE ACL

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Rohit Singh · Accepted solution]

Hi @abhisek  

Please find my response

(1) only my group should be able to read, write, create and delete access to this table. - Add all those roles (roles which are attached to the defualt ACL created when a table is created) to your group.

(2) ITIL user must have read access only. - Add ITIL role in READ table.none ACL

 (3) Admin user must have create, delete and write access. - use admin overrides checkbox in table.None CREATE, DELETE and WRITE ACL

If my response helped, please mark it correct and close the thread so that it benefits future readers.

Regards,

Rohit

[Rohit Singh]

Hi @abhisek   Request you to please mark the solution as helpful as well.

[Murtaza Saify]

Step 1: Identify the Roles and Groups

1. Your Group: Ensure you have a group created (e.g., My Custom Table Group).

2. ITIL Role: The itil role is typically assigned to ITIL users.

3. Admin Role: The admin role is assigned to admin users.

---

Step 2: Create ACLs for Your Custom Table

Navigate to System Security > Access Control (ACL) and create the following ACLs:

---

ACL 1: Restrict Access to Your Group Only

1. Name: My Custom Table - Full Access for My Group

2. Type: Record

3. Table: Your custom table

4. Requires Role: Leave blank

5. Requires Group: Select your group (e.g., My Custom Table Group)

6. Conditions: Leave blank (applies to all records in the table)

7. Script: Leave blank

8. Permissions:

   • Read: Checked

   • Write: Checked

   • Create: Checked

   • Delete: Checked

9. Description: Restrict full access to your group only.

---

ACL 2: Grant Read Access to ITIL Users

1. Name: My Custom Table - Read Access for ITIL Users

2. Type: Record

3. Table: Your custom table

4. Requires Role: itil

5. Requires Group: Leave blank

6. Conditions: Leave blank (applies to all records in the table)

7. Script: Leave blank

8. Permissions:

   • Read: Checked

   • Write: Unchecked

   • Create: Unchecked

   • Delete: Unchecked

9. Description: Grant read-only access to ITIL users.

---

ACL 3: Grant Full Access to Admin Users

1. Name: My Custom Table - Full Access for Admin Users

2. Type: Record

3. Table: Your custom table

4. Requires Role: admin

5. Requires Group: Leave blank

6. Conditions: Leave blank (applies to all records in the table)

7. Script: Leave blank

8. Permissions:

   • Read: Checked

   • Write: Checked

   • Create: Checked

   • Delete: Checked

9. Description: Grant full access to admin users.

---

Step 3: Order of ACLs

Ensure the ACLs are ordered correctly in the Access Control Rules list. The order should be:

1. Your Group ACL (most restrictive)

2. ITIL User ACL

3. Admin User ACL

This ensures that the most specific rules are evaluated first.

---

Step 4: Test the ACLs

1. Log in as a user in your group and verify that you have full access (read, write, create, delete).

2. Log in as an ITIL user and verify that you have read-only access.

3. Log in as an admin user and verify that you have full access.