ACL on parent and child table work

[Kohei4]

Hi

Please let me confirm how acl rules work configured on parent and child tables.

There is a create acl rule (A) on the parent table which requires 'parent table user role' and there is another rule (B) on the child one which requires 'child table user role'.

When a user with the parent table user role and without it for child table try to create records on the Child table, user cannot do that because the acl rule B deny the access to child table. Is my understanding right?

Now I am troubleshooting the issue that a user with import_admin role can create records on a table extended from sys_import_set_row table that should not be accessed.

I wonder if import_admin can override any acls for all tables extended from the sys_import_set_table...

The reason the user has the import_admin role is than the user need to import excel file for other tables on another application.

[Mandeep Karan]

Here is an example

Table Xipher is extended from import set row

Create ACL on Xipher table:

User with Import Admin Role:

New Button missing

Now User with Itil role:

Note: In order to access extended table user must have both roles:(import_admin & role specific to extended table)

Regards,

Mandeep

[Mandeep Karan]

Solution: Please also add import_admin role for test user as the user needs access on the extended table and also the extending table

[Mandeep Karan]

Any luck? Have you tried the above solution?

If it resolves your issue please mark the answer as correct and helpful.

Regards,

Mandeep

[Kohei4]

Hi, Mandeepkran

Thank you for your help but I'm still struglling with this issue.

Confirmed that ACL is created with None level and not only "Create" ACL but also "Read", "Write" and "Delete" ACLs is there (I assume this is the default acls created when this table was created).

Do you know the case user can create records without the necessary role?

Kohei

[Mandeep Karan]

If table provides access to snc_internal or public roles then only anyone can create records.

Else, you can also use record producer to create records on table.

Have you checked if your user is having both roles, import_admin and the role specific to table.

Regards,

Mandeep