# User ACL + Role not working

**URL:** <https://community.parseplatform.org/t/user-acl-role-not-working/2828>\
**Category:** Cloud Code\
**Tags:** query, acl\
**Created:** [August 5, 2022, 2:09pm UTC](https://community.parseplatform.org/t/user-acl-role-not-working/2828 "2022-08-05T14:09:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![reptilehaus](https://community.parseplatform.org/user_avatar/community.parseplatform.org/reptilehaus/32/1259_2.png) [@reptilehaus](https://community.parseplatform.org/u/reptilehaus)\
**Post date:** [August 5, 2022, 2:09pm UTC](https://community.parseplatform.org/t/user-acl-role-not-working/2828/1 "2022-08-05T14:09:22Z")

</div>

I have an object which has:

\_wperm: “role:admin”  
\_rperm: “role:admin”

\_acl: role:admin  
w: true  
r: true

and a user who has been added to the admin group. I am then trying to query a collection like so:  
await new Parse.Query(Organizations).find()

and there is no results, is there any reason why this might happen ? the user should have full access to 1 object in this collection. I have set the CLP to be public, I also tried setting CLP to admin but nothing works

---

<div class="post-metadata">

**Author:** ![reptilehaus](https://community.parseplatform.org/user_avatar/community.parseplatform.org/reptilehaus/32/1259_2.png) [@reptilehaus](https://community.parseplatform.org/u/reptilehaus)\
**Post date:** [August 5, 2022, 2:38pm UTC](https://community.parseplatform.org/t/user-acl-role-not-working/2828/2 "2022-08-05T14:38:26Z")

</div>

I saw this on stackoverflow, is it true that you must pass the session token into find in order to have ACL queries work (read here: [Parse Server ignores ACL - Stack Overflow](https://stackoverflow.com/questions/62935649/parse-server-ignores-acl))

`result = await query.find({sessionToken : user.getSessionToken()});`  
instead of  
`result = await query.find();`

---

<div class="post-metadata">

**Author:** ![davimacedo](https://community.parseplatform.org/user_avatar/community.parseplatform.org/davimacedo/32/316_2.png) [@davimacedo](https://community.parseplatform.org/u/davimacedo)\
**Post date:** [August 5, 2022, 2:52pm UTC](https://community.parseplatform.org/t/user-acl-role-not-working/2828/3 "2022-08-05T14:52:39Z")

</div>

Where are you running the query? If you are running from cloud code, yes. You need to pass session token.