- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-07-2022 08:36 PM
Hello,
When I set a script with Client-callable script include ACL rule, and call the script in the business rule (the script is included in the script include), will the access of the script be restricted?
If the role does not have the permissions required in the script, will the script execute successfully?
What does the execution of record do in ACL?
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-08-2022 12:05 AM
Say for example, you have a client callable script include that provides sensitive information that is to be accessed by people with specific role.
In that case if you set the isPublic function return false to mark that script include as Private and set the ACL to have the execute permission for the people with right role.
benefit of this is that If you simply create the script include any developer can try to make use of the functions available in the script include that may lead to potential data leak/security risk.
Thanks & Regards,
Vasanth
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-08-2022 12:05 AM
Say for example, you have a client callable script include that provides sensitive information that is to be accessed by people with specific role.
In that case if you set the isPublic function return false to mark that script include as Private and set the ACL to have the execute permission for the people with right role.
benefit of this is that If you simply create the script include any developer can try to make use of the functions available in the script include that may lead to potential data leak/security risk.
Thanks & Regards,
Vasanth
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-12-2022 01:42 AM
Thank you!