Field level ACL is not working

[priyanka chodip]

Hi,

there is a group called(DOC). they don't have write access to any field on server table, they can only read the fields. but they want write access on 2 fields(A & B).
so i created a role called (field_access) and created two field level ACL's and in required role i added the role(field_access)which is created by me and also added same role to the group (DOC).
i tested by impersonating a person from the group DOC and it did not work.
then i wrote a script include (name - accesstofields)
accesstofields.prototype = Object.extendsObject(AbstractAjaxProcessor, {
accesstofieldsinserver: function() {
if (gs.getUser().hasRole('field_access')){
return true;
}
return false;
},
type: 'accesstofields'
});

and in Field level ACL, i called the script include like:
answer= new global.accesstofields().accesstofieldsinserver();

 even though the DOC group is not getting field level access.

if anyone has idea on this , Please do help.
Thankyou
Priyanka

[Anil Lande · Accepted solution]

Hi,

This may be because you have created only field level write ACL's. If users of group does not have access to write on Record then they won't be able to write fields.

Create an ACL for table with write access and grant write access to your group.

Note: Instead of introducing  new role for only one group you can check user membership in ACL script like:

if(gs.getUser().isMemberOf('DOC')){

return true;

}

Thanks,

Anil Lande 

[Anil Lande · Accepted solution]

Okay, You need to create one more ACL to restrict access to all field.

1. Create table.* ACL and use below logic in script part.

if(gs.getUser().isMemberOf('DOC')){

return false;

}

This way (*) all fields will be read-only for this group and your two field level ACL's will allow users to edit those two fields only.

[Anil Lande]

Glad to know your issue is resolved. 

You can mark more than one response as helpful and correct.

Happy learning 🙂

[priyanka chodip]

Hi,
your solutions are working awesome.
but when table level ACL is created, it is masking other ACLs.
can you please suggest any solution.
attached the screenshot, please have a look.
Thankyou.

[Anil Lande · Accepted solution]

Yes, that should be fine. Did you noticed any issue for other users (having itil role)?

Please check if there is any impact on other table and rows.

In your case it is masking parent table ACL's which will not be effective since you made these changes.

If you see any issue for other users who, then create similar ACLs (which are masked) with same conditions, roles and script.

[priyanka chodip]

this helps me.
thankyou so much🙂.

thanks,
priyanka