question Re: Question on ACL for scoped application in Developer forum

Question on ACL for scoped application

Ahmmed Ali — Thu, 18 Feb 2021 13:44:32 GMT

Hello All,

In our environment, we have ACL on user table to limit access to user records based on some condition.

we have on custom scoped application where we want to show all users (by pass the above ACL) only for tables/forms which are in this scoped application.

ex: We have one table in scoped app extending task table. so if user opens any Global task (ex: incident), users should see their department users (as per above ACL).

If users open the custom task table form, then they should see all user records.

Any suggestion how to achieve this use case?

Thank you in advance.

Ali

Re: Question on ACL for scoped application

Tom Sienkiewicz — Thu, 18 Feb 2021 15:22:50 GMT

All active ACLs created on a table are eveluated for all users, it does not matter where the query comes from really.

I think to achieve what you need, you either need to ensure the users who should see all users have a specific role and there is an ACL that allows that (this would probably only make sense if those users ONLY use the custom app and not the global apps).

Perhaps you could also add reference qualifiers to the global forms/fields pointing to the User table, which restrict which users one can select depending on the requirements.

Re: Question on ACL for scoped application

Ahmmed Ali — Mon, 22 Feb 2021 05:16:43 GMT

Thank you for response.

The custom app users also use global ITSM application, hence ACL with specific role is not an option.

Also there are many global form and multiple customers. Hence reference qualifier is also not possible as all we would need to update all user reference fields in the instance.

Wanted to know if we can find which scope field is referring the user table in ACL script. This way I could add ACL to allow all user selection for those particular fields of custom app only.

Thank you.