Trouble adding read access to sys_user_group for no role users

[McGuire6799]

Hello-

I have added an ACL for the sys_user_group to have read access to the table. I have a catalog item with a reference to this table to allow users to select the required support and approval group for a business application. I cannot get this to field to populate any options for a user with no roles. ITIL and Admin can see them just fine. I have added the below script to the advance section as well as I have previously done for another table.

if (gs.getUserID() == current.sys_id || gs.getUser().hasRoles())
answer = true;
else
answer = false;

[McGuire6799]

Hello, I thought I mentioned before but I had not. I have tried it on the table level with your script and without advanced and same result.

[Allen Andreas]

Hi @McGuire6799 

My apologies, I'm a bit confused.

In all of your screenshots, your "read" ACLs for this have not been on the table level. They've been on the table.field level...like table.* or table.name...

Please show where you've created a "read" ACL for the sys_user_group table, just on the table level.

Please mark reply as Helpful/Correct, if applicable. Thanks!

[McGuire6799]

I never posted a screenshot, but I have tried it. Here is the screenshot requested and the results on the portal side as an end user.

[Allen Andreas]

Hi,

I'm glad you resolved your issue. This has been a pretty confusing thread because it's taken my several times trying to ask about your ACL just being on the table itself.

For you saying: "I never posted a screenshot"

You have, and every time you have, it's been of a table.field ACL.

If you're saying you haven't posted a screenshot of just your table level ACL...I know that...which is why I was asking, numerous times, haha.

Anyways, I'm glad you got assistance.

If any other reply was Helpful, please mark it as such. I had hoped in my 5+ replies something helped, but perhaps not, sorry about that!

Take care! 🙂

[vkachineni · Accepted solution]

Can you try with just

answer = true;

You are only giving read access to Name field. You can add conditions later.