I need to give write access to anyone field of cmdb_ci_hardware table, but i guess ACLs on cmdb_ci parent table are conflicting. can someone help?

Sachin Gavhane
Giga Guru

hi @shloke04 

I need to give write access to one field of cmdb_ci_hardware table.

but parent table ACLs cmdb_ci table are conflicting .

I have written acls on cmdb_ci.

can you help

4 REPLIES 4

Ankur Bawiskar
Tera Patron
Tera Patron

Hi,

if you create field level ACL on child then system evaluates child ACL

Based on that it will either allow/block

See image where system would search for table.field

if found it won't look for parent level ACL

find_real_file.png

Regards
Ankur

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

I have created field level ACL on child as well as parent both.

there is field level acl on cmdb_ci table to give write access to to one field of cmdb_ci table and read access to other fields.

 

also, I have created field level acl on cmdb_ci_hardware to give write access to one field.

for parent table it is working but not for child table

Hi,

you want your requirement for child table or parent table?

what's your requirement?

did you by debugging ACLs which ACL is restricting the field on child table?

Did you check user satisfies Child Table.None WRITE ACL or not?

Regards
Ankur

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

shloke04
Kilo Patron

Hi @Sachin Gavhane 

In this case, you just need to create one Write access ACL on the Table where you want to give access to. In this case it will be Hardware Table.

If you have created this it will override the parent table level ACL and will work for you as even One ACL provides ACCESS user will be able to go through and will have access.

Can you share the screenshot of your ACL configured. Also make sure along with Write ACL , user is having Read Access to that field or not. Check that as well.

If not then create a Read Access ACL on Hardware or child table you want and then give them write access.

Can you check if they have access at Table level or not?

Hope this helps. Please mark the answer as correct/helpful based on impact.

Regards,
Shloke

Hope this helps. Please mark the answer as correct/helpful based on impact.

Regards,
Shloke