Add new ACL

All Unspecified: How it works

Many ACL scopes include the All Unspecified checkbox. This option controls how permissions are applied to items that do not have a specific ACL defined for them.

All Unspecified = Unchecked

When All Unspecified is not selected:

  • One or more specific items must be selected.

  • The chosen Personas receive the selected rights only for those items.

  • All other items remain unaffected by this ACL.

Use this option when permissions should apply only to explicitly selected items.


All Unspecified = Checked

When All Unspecified is selected:

  • The selected rights are granted to the chosen Personas for all items within the scope.

  • Any items that already have a more specific ACL defined in another rule are excluded.

  • Specific ACLs always override All Unspecified.

This allows you to define a general baseline permission while still applying exceptions where needed.


Example: Data Part ACL

Situation

  • Everyone has View rights on All Unspecified data parts.

  • Persona A has View and Edit rights on Data parts 1–5.

  • Persona B has View and Edit rights on Data parts 6–10.

Result

  • Everyone has View rights on Data parts 11 and higher.

  • Data parts 1–10 are excluded from All Unspecified because they are already covered by more specific ACLs.

  • Persona A and Persona B retain their defined rights.


Important Note

If you want Everyone to have View rights on all data parts (including 1–10), you must:

  • Create a separate ACL

  • Select all data parts explicitly, one by one

  • Assign View rights to Everyone

Using All Unspecified alone will not override existing item-specific ACLs.

If more detailed access control is needed inside the Action form, custom JavaScript must be implemented.

Last updated

Was this helpful?