Can't create sys_user_group records from scoped application

Jan Fr_hwacht
Tera Expert

Hi all,

I have a scoped application which should create records in the table "sys_user_group".


Per default the table "sys_user_group" has the checkbox "read_access" ticked when looking in the "Application Access" tab on the table configuration.
The "Accessible from" field is set to "All application scopes".
 
The "Can create" and "Can update" checkboxes were adapted through an update set on the instance.
The creation of all GlideRecords have receive a "null" result when executing the GlideRecord.insert() method.
 
 
When executing a fix script from within the scoped application to create a "sys_user_group" record it shows the following messages:
Security restricted: Access to api 'setValue(sys_user_group.name)' from scope '...' has been refused due to the api's cross-scope access policy
Security restricted: Access to api 'put(sys_user_group.manager)' from scope '...' has been refused due to the api's cross-scope access policy
Security restricted: Access to api 'put(sys_user_group.type)' from scope '...' has been refused due to the api's cross-scope access policy
Security restricted: Create operation against 'sys_user_group' from scope '...' has been refused due to the table's cross-scope access policy
 
 I even added a "Restricted caller access record" to test if I can get rid of the "Create operation against "sys_user_group" .. has been refused message. But even that didn't work.

Does anyone know why my scoped app is not able to create and update record on global scoped "sys_user_group" table ?
 
5 REPLIES 5

Nestor Paredes
Tera Contributor

In case it helps:

NestorParedes_0-1691311352084.png

 

These need to be in place for insert / update, otherwise you will get the "Access to api 'setValue(sys_user_group.name)' from scope" messages.

 

Regards,

N.