Field level ACL is not working

[priyanka chodip]

Hi,

there is a group called(DOC). they don't have write access to any field on server table, they can only read the fields. but they want write access on 2 fields(A & B).
so i created a role called (field_access) and created two field level ACL's and in required role i added the role(field_access)which is created by me and also added same role to the group (DOC).
i tested by impersonating a person from the group DOC and it did not work.
then i wrote a script include (name - accesstofields)
accesstofields.prototype = Object.extendsObject(AbstractAjaxProcessor, {
accesstofieldsinserver: function() {
if (gs.getUser().hasRole('field_access')){
return true;
}
return false;
},
type: 'accesstofields'
});

and in Field level ACL, i called the script include like:
answer= new global.accesstofields().accesstofieldsinserver();

 even though the DOC group is not getting field level access.

if anyone has idea on this , Please do help.
Thankyou
Priyanka

[Anil Lande · Accepted solution]

Hi,

This may be because you have created only field level write ACL's. If users of group does not have access to write on Record then they won't be able to write fields.

Create an ACL for table with write access and grant write access to your group.

Note: Instead of introducing  new role for only one group you can check user membership in ACL script like:

if(gs.getUser().isMemberOf('DOC')){

return true;

}

Thanks,

Anil Lande 

[Anil Lande · Accepted solution]

Okay, You need to create one more ACL to restrict access to all field.

1. Create table.* ACL and use below logic in script part.

if(gs.getUser().isMemberOf('DOC')){

return false;

}

This way (*) all fields will be read-only for this group and your two field level ACL's will allow users to edit those two fields only.

[Anil Lande · Accepted solution]

Hi,

This may be because you have created only field level write ACL's. If users of group does not have access to write on Record then they won't be able to write fields.

Create an ACL for table with write access and grant write access to your group.

Note: Instead of introducing  new role for only one group you can check user membership in ACL script like:

if(gs.getUser().isMemberOf('DOC')){

return true;

}

Thanks,

Anil Lande 

[priyanka chodip]

Hi Anil, 

Thankyou for the reply. 

I tried that as well. I created an ACL write access for table and added group in required role. 

By doing that, group is getting access to write on other fields as well. But requestor wants write access on fields A & B, Remaining fields should remain readonly

Please suggest an alternative to fix this issue. 

Thankyou 

Priyanka

[Anil Lande · Accepted solution]

Okay, You need to create one more ACL to restrict access to all field.

1. Create table.* ACL and use below logic in script part.

if(gs.getUser().isMemberOf('DOC')){

return false;

}

This way (*) all fields will be read-only for this group and your two field level ACL's will allow users to edit those two fields only.

[priyanka chodip]

Hi Anil,

Now it's working as expected. Thankyou so much.

Thanks &regards
Priyanka