Error message when saving a Quote record on CSM Configurable Workspace

Julian Piovesa1
Tera Contributor

3 hours ago

When saving a Quote (sn_quote_mgmt_core_quote) record on the CSM Configurable Workspace, this error message appears: Read operation against 'sn_quote_mgmt_core_quote_line_item' from scope 'sn_quote_mgmt' has been refused due to the table's cross-scope access policy.


It might be a cross-scope privilege issue, but we didn't find any requested records that might be related.
We also tried deactivating a few ACLs that could be causing this, but again, no luck.

Do you know what might be causing this kind of error?

Thank you,

 

Preview file
67 KB
0 Helpfuls
  • 95 Views
1 REPLY 1

BrandiC2
Tera Contributor

2 hours ago

Hi Julian, 

Let's try narrowing this down a bit since it appears to be happening in the CSM Workspace it adds a bit more complexity. 

If the workspace is trying to render a list, a total, or a form field from the sn_quote_mgmt_core_quote_line_item table and the UX Resource doesn't have the right permissions, it will trigger the cross-scope refusal. Here are some suggestions for troubleshooting: 

  1. Scope & Access
    • Verify "Restricted Caller Access" (RCA): Navigate to System Applications > Application Restricted Caller Access. Look for any records where the status is "Requested" or "Invalid" involving the Workspace scope.
    • Target Table "Can Read": Check the sn_quote_mgmt_core_quote_line_item table has "Can read" checked for "All application scopes" in its Application Access tab.
    • Manual Privilege Sync: Create a manual entry in sys_scope_privilege for:
      • Source: sn_csm_workspace 
      • Target: sn_quote_mgmt_core_quote_line_item

  2. Workspace Architecture 
    • Data Broker Permissions: CSM Workspaces use Data Brokers to fetch data. Check if the Data Broker fetching the Quote Line Items is defined in a different scope than the table itself.
    • UX Client Script Scope: If you have a custom script on the workspace page (e.g., to calculate a total), ensure that script isn't calling a Global API to touch a Scoped table without an RCA record.
    • Form Header/Ribbon: If the error appears only when the page loads, check the Ribbon Configurations or Form Headers. One of these components might be trying to "Reach" into the line items to display a count or sum.

3. Operational Integrity

  • ACL Integrity: Since you previously deactivated ACLs, ensure you have re-enabled them, if you haven't already.  If the cross-scope issue is resolved but the user still can't see data, then (and only then) troubleshoot ACLs using the SNC Access Control Plugin.
  • Plugin Dependencies: Ensure the app for Quote Management is fully updated. Sometimes a mismatch between the Workspace version and the Quote Management version causes missing privilege records.

Last thought: The fact that it happens specifically on Save suggests a Write or Update operation might also be failing or being triggered by a background process (like a price recalculation).

 

Good luck. Let me know if this helped you. 

0 Helpfuls