Can Before Query Business rule overrides ACL ?

[Ankita Kolhe]

Hi Community,

In the knowledge form,Service(referencing cmdb_ci_service)  field has restrictions to access for cmdb_ci_service table for non-admin users. I want all users to have access to this table but can't find any read ACL for the same table.

cmdb_ci_service list showing as message as 'Security constrains restrict access'.

Can I create a Before Query Business rule to override the non identified ACL?

Thanks,

Ankita 

[Musab Rasheed]

Hello,

Do not write query BR instead create new read record ACL on cmdb_ci_service table and don't give role/condition/script. It will give access.

Go through below links to understand ACL vs Query BR

https://community.servicenow.com/community?id=community_article&sys_id=8b8f72fd1babd810d2ccea89bd4bcb14

https://thesnowball.co/restricting-access-acl-vs-before-query-business-rule/#:~:text=ACL's%20should%20be%20your%20first,to%20certain%20records%20in%20ServiceNow.

Please hit like and mark my response as correct if that helps

Regards

[Ankita Kolhe]

Hi Musab, Thanks for your response but I created a read ACL as you said .It's not working.

[Musab Rasheed]

Share screenshot  how you have configured. It should work 100%

[MrMuhammad]

HI Ankita,

If you are not able to find the ACL on the target table then there are chances that the ACL might be inheriting from the parent table or parent of the parent table. Please check on all the parent tables in the hierarchy to see what roles are allowed to have access and then modify the correct one.

I'd suggest finding the right ACL before any modifications. There are chances that the field level ACL's in place as well so you might want to create modify them as well.

Regards,

Muhammad