Understanding difference between table.none and table.* in ACL

[Singhdeep70]

I am trying to understand how ACLs work in ServiceNow, specifically the difference between table.none and table.*.

From my understanding:

• table.none controls access to the entire record
• table.* controls access to all fields in that record

However, I am still confused about how they work together in a real scenario.

Could someone please explain this with a simple real example?

Also, I would really appreciate if you could explain the actual meaning of these terms:

• What does "none" really mean?
• What does "*"  really represent in this context?

[KumkumM]

table.none means the ACL is applied at the table (record) level.
It works like an entry point — it is checked first.
If the user does not pass this ACL, they cannot access or even see the record.

table.* means the ACL is applied to all fields of that table.
It does not control access to records, but controls what fields the user can access after they are allowed into the record.

---

Simple Example (House Analogy)

Think of a table like a house:

• table.none is like the main door key.
  If you have this key, you can enter the house (access the record).
  If not, you cannot enter at all.
• table.* is like having access to all rooms inside the house.
  Once you are inside, it controls whether you can access the rooms (fields).

[KumkumM]

table.none means the ACL is applied at the table (record) level.
It works like an entry point — it is checked first.
If the user does not pass this ACL, they cannot access or even see the record.

table.* means the ACL is applied to all fields of that table.
It does not control access to records, but controls what fields the user can access after they are allowed into the record.

---

Simple Example (House Analogy)

Think of a table like a house:

• table.none is like the main door key.
  If you have this key, you can enter the house (access the record).
  If not, you cannot enter at all.
• table.* is like having access to all rooms inside the house.
  Once you are inside, it controls whether you can access the rooms (fields).

[Singhdeep70]

Thank you  for reply.

from what you have written from we can assume that for every operation first we need to create table.none ACL.