Admin Overrides is Not Working

[Duncan Pederse1]

Hello Experts,

"Admin Overrides" on ACL seems to be flat-out not working. I am an admin. I have an ACL with Admin Overrides = True, yet I cannot edit the record. However, when I set the "Script" field to "answer = true", I can edit the record.

Am I missing something?

[Duncan Pederse1]

Ok, well I have fixed the problem, but I still do not understand.

I am creating Create ACLs on a custom 'u_phone_line' table.

I have at first: one ACL on 'u_phone_line' (table level)

When the Script on 'u_phone_line' returns True, I can create the record and edit all the fields. However, when it returns False, even if Admin Overrides is selected, it appears the Field Level ACL is defaulting to '*.*' which returns False.

When I create another ACL for u_phone_line.* it masks the *.* ACL and I can edit everything. 

What is going on here? Why is it that when my table level ACL returns true, I can edit everything, but when my table level ACL returns false, even when Admin Overrides is selected, I all of a sudden have to create a field level ACL to mask *.*?

[asifnoor]

Hi

Field level ACL gets higher priority than table level. So if there is an ACL at field level, it gets the preference than the ACL at the table level.

[Duncan Pederse1]

But why would it matter whether the Table ACL returns true or false?

[asifnoor]

In general, It matters because if there is no access to the record, then obviously you cannot access the field in the record. Hence you should give table level access and then give further access on the respective fields.

Regarding admin overrides, kindly refer to this link https://hi.service-now.com/kb_view.do?sysparm_article=KB0685046

Mark correct and helpful if this answers.