Will the script include be restricted by ACl?

l c1
Kilo Contributor

Hello,

When I set a script with Client-callable script include ACL rule, and call the script in the business rule (the script is included in the script include), will the access of the script be restricted?
If the role does not have the permissions required in the script, will the script execute successfully?

What does the execution of record do in ACL?

1 ACCEPTED SOLUTION

Say for example, you have a client callable script include that provides sensitive information that is to be accessed by people with specific role. 

In that case if you set the isPublic function return false to mark that script include as Private and set the ACL to have the execute permission for the people with right role.

benefit of this is that If you simply create the script include any developer can try to make use of the functions available in the script include that may lead to potential data leak/security risk. 


Thanks & Regards,
Vasanth

View solution in original post

6 REPLIES 6

Say for example, you have a client callable script include that provides sensitive information that is to be accessed by people with specific role. 

In that case if you set the isPublic function return false to mark that script include as Private and set the ACL to have the execute permission for the people with right role.

benefit of this is that If you simply create the script include any developer can try to make use of the functions available in the script include that may lead to potential data leak/security risk. 


Thanks & Regards,
Vasanth

Thank you!