Field ACL (write) not working as expected in custom table
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11 hours ago
Hi All,
I am trying to restrict write access to a specific field using ACL, but it is not working as expected.
Requirement:
Only users with the ITIL role should be able to edit the Department field in a custom table (Test SNOW). All other users should have read-only access to this field.
So what will be approach to this requirement.I want to use only ACL.
Any guidance or suggestions would be really helpful.
Thanks in advance!
1 REPLY 1
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
9 hours ago - last edited 9 hours ago
A single field-level write ACL on that one field should do — leave the existing table-level write ACL alone so non-ITIL users can still edit other fields.
as security_admin
1. ACL > New
2. Type: record, Operation: write
3. Name: u_test_snow . u_department (use the actual table/column names from sys_db_object and sys_dictionary — replace if different)
4. Required Roles: itil
ACLs are evaluated table-first, then field. Non-ITIL users pass the table-level write ACL (form stays editable) but fail this field-level write ACL, so only the Department field becomes read-only for them. Read access is unaffected.
