Secure notes visibility configuration

[Mike Insley]

Hi,

Would anyone the best-practice way to configure the visibility and writeability of the Secure notes field on a Security Incident - (for example, configure the field so that only a Security Incident Analyst can write to the field, and allow a Security Incident Manager to read it's contents by denying write permissions) I would have used ACLs on the field to control this, however I believe that this isn't the correct way to go about it, and can't find any documentation relating to it.

Thanks in advance

Mike

[jeromeliu · Accepted solution]

Secure note is nothing but encrypted text that will be stored in the database, it is correct to use ACL segregate write permission to given role. You can also have UI policy to control the visibility but that's client side only

[Rupali Naik]

Is there any behavioral change in tokiyo release for this field?