Understanding table ACLs

[Michael Searle]

I'm trying to improve my understanding of table ACLs but feel I'm missing something.

I created the ACL rule shown below. I expect the person with the specified role to have access to the 65 records that match the condition. It seems, however, that the person has access to all the records in the table.

What am I missing or misunderstanding?

[Yousaf]

Infact keep this table level ACL this will give that role access to table. you can remove condition from this one.

Create another Read ACL select table and * give this role and add this condition there.

[Ankur Bawiskar]

Hi,

ACL will evaluate Role + Condition + Script

If all evaluate as true then access is given

Are you sure there are no other table level READ ACLs on that table because if any 1 table level READ ACL allows then your ACL won't be evaulated.

Regards
Ankur

[Michael Searle]

Hi Ankur,

Thank you for your answer. To answer your question, if I remove the role I created from the person then that person can only see/read records he or she created. That leads me to believe that another ACL isn't overriding the ACL I created. Is that a correct assessment?

Thank you.

Michael

[Ankur Bawiskar]

@Michael Searle 

this point is not correct -> if I remove the role I created from the person then that person can only see/read records he or she created

The table level READ ACL should evaluate to true for user to view the records.

there can be extra query BR on that table to restrict the records. but that's different point.

Regards
Ankur