Access Analyzer says "Pass" in spite of all ACL is "Blocked"

Kohei Tominaga1
Tera Expert

Hi,

 

I am trying to find the reason why an user can access to a email record.

What I have expected is the user cannot access to the email but the user can do actually.

So, I have run the access analyzer and the result is curious.

 

Debug log for all ACLs is saying access is blocked but the Total Result is Pass.
How do I understand this result?

KoheiTominaga1_0-1716449579080.png

 

2 REPLIES 2

Kieran Anson
Kilo Patron

"Alert Icon  in any status indicates the presence of a script in the ACL. Review highlighted ACLs to understand the final access. To know more about how these controls are evaluated and review the logic to determine the access."

The above is from the access analyser page.

 

Access to an email record is plugin dependent, review the scripts of the orange 'blocked' status to understand the reason access might be provided.

 

For example, the global scope ACL allows:

  • Access to received emails where the user can read the target record
  • For sent emails, it will check if the email has any access restrictions, otherwise follow the same rule as with received emails

sagarshinde
Tera Contributor

Hi @Kieran Anson , @Kohei Tominaga1 

Same issue for me also,  

I am trying to find the reason why user can't access to report . it show next error "Access to this content denied based on report_view field ACLs." The expectation is the user should have access to the report.

So, I have run the access analyzer and the result is curious.

Debug log for all ACLs is saying access is Passed and skipped but the Total Result is Blocked.
How do I understand this result and how to resolve?

 

sagarshinde_0-1733205630093.png