ACL does not limit the number of records when exporting to excel from a list.

Victor Mesa · ‎08-06-2023

Hello colleagues,

We have encountered a problem in our Servicenow instances, we see that the list of the incident table shows 25 records that are the ones that the ACL programming allows a user to see.

On the other hand, if we export that same list from the incident table, 230 records are created in excel.

What could be happening so that the ACLs do not limit that exportation?

Thanks,

Tony Chatfield1 · ‎08-07-2023

Hi, it is unlikely to be the ACL at fault, although as you have not provided any details of the ACL configuration the community has no way to assess this.

Is the ACL OOB or custom configuration?
Were the records exported from a list view via UI, or were they exported via a report list view?

Have you checked to see if there is a 'query' business rule 'hiding' records from the user in UI,
as a QBR would not be applied to a data export.

Before Query business rules (servicenow.com)

Victor Mesa · ‎08-07-2023

Thanks @Tony Chatfield1 ,

Yes, there is a QBR that applies to the table.

The export is done from the list view via UI.

Any ideas to limit that export?

Tony Chatfield1 · ‎08-07-2023

If you disable the QBR does the number of records shown in the list match the number exported and the number matched by the ACL?
If yes and you do not want the records to be visible to your users, then I suspect that you will need to update the ACL so that it mirrors the QBR behavior.

Victor Mesa · ‎08-07-2023

Yes, if I disable QBR, the records shown match the exported ones.

We have a very complex QBR to implement in the ACL.
Can there be any other way to limit the export to the displayed records?