Scoped Application Role ACL Issue on extended task table: Company Field Visibility

[mkm1]

Extended task table in my scoped app. I created 'create', 'read', and 'write' ACLs on the table for the scoped application role, and the 'company' field has 'read' and 'write' ACLs for the scoped application role. I created dictionary overrides to 'Override reference qualifier' and 'Override dependent'. There is no UI policy or client script that will prevent this field from being displayed, but this field is still not visible to the scoped role.  To debug I created a read ACL on 'core_company' table to the scoped role, still not working.

Note: Assigned To field had similar issue but creating above ACL on Assigned to field resolved the issue but not for the company.

Attached the screen shots for admin and scoped role for on the extended table and "Debug Security" screenshots see which ACLs are being evaluated.   Your guidance or input will be a lot of help.

[mkm1]

Even when using the core_company field as a reference field in a custom table in scoped application, the reference field is not accessible and visible to the scoped application roles. All the 'read', 'write', and 'create' ACLs are in place for the specific scoped role, but the reference data is not visible to the scoped role.

Added Cross-Scope Privileges explicitly allow cross-scope access for the core_company table, still the reference field is not accessible and visible to the scoped role. ServiceNow best practices do not recommend extending the core_company table, but using it as a reference has its issues. Any insight to resolve will help.

Attached files with screenshots of:

• 'Company List - Visible to System Admin'
• 'Company List - Visible to scoped role'
• 'Cross scope read privilege for core_company'
• 'Company ACL - Read'