How to give "read only" access to a table using a role?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2021 06:25 AM
Hello - I am trying to create an ACL (read) and associate it with a custom role I created, however, I am not able to achieve the desired results (which is that the role, when granted to a user, makes a table read only for that user).
The table is custom, and there are the default ACLs that have been created (read / create / write / delete), however they are not associated with the role I created. Am I missing something?
Any thoughts or advice?
Thanks.
The ACL is as follows:
Application: Global
Operation: Read
Admin overrides: yes
Active: yes
Name: custom table *
Role: custom_role
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2021 06:29 AM
Create a new ACL select the table name as your custom table name and field as asterisk,
Under role give the decide role which you created I.e. custom_role
This will make the table and all its field readonly....
IF POSSIBLE SHARE THE SCREENSHOT OF THE ACL WHICH YOU HAVE CREATED..
PLEASE MARK THE ANSWER CORRECT OR HELPFUL IF YOU FIND IT USEFUL
☑️ Please mark responses as HELPFUL or ACCEPT SOLUTION to assist future users in finding the right solution....
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2021 06:52 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2021 06:48 AM
I would consider creating a separate writer role, so that you have roles like:
- custom_app.reader
- custom_app.writer <-- just generic role names for this example
Then, you would create a read-ACL that includes both roles. After that, create (or update the existing) a write, create, and delete ACL so that it only has the .writer role. So, your ACL's should look something like:
ACL | Includes Roles |
read | .reader, .writer |
create | .writer |
write | .writer |
delete | .writer |
When testing, make sure to uncheck the Admin overrides box, so that you can really see the behavior of it. Let me know how it goes!