Cannot see lists in custom workspace // roles restrictions not working at all

Luca Michalczyk
Tera Contributor

Hello people 🙂 

i created a new workspace experience using the App Engine Studio. While doing so, all tables i selected where inserted into list components which is used to navigate between the list views of the inserted tables. So far so good.

In order to implement a role concept for my new application, i created a role which should be able to only read all lists, entries etc. 

After using the guided creation of a new role in AES, i configured the role to only have a 'read'-permissions for all the tables i created in AES / that are visible in the new workspace. But when i am impersonating as someone who can has the new role, the list-navigation and the list view used to display the list of entires of a table does not load.

I searched for a while and found a hotfix which told me to create new records for the table 'List Applicabilites' or 'sys_ux_applicability_m2m'. 

This enabled the person whom i was impersonating as to see all lists they should see. 

The problem is that after enabling the role to see all the lists, the role was also able to perfom create, write and delete operations on said tables. According to the definition in AES the role is only supposed to be able to read them.

 

Are you experiencing similiar problems or did someone of you found a solution?

Thanks in advance! 

7 REPLIES 7

Hi Dale,

I am also facing the same issue. Impersonate user consists 'canvas_user' role still list is not loading. Any suggestions.

Regards,

Santosh

What are the versions of ServiceNow and App Engine Studio that you are using? 


--------------------------------------------------
Workflow Cowboy
LinkedIn: https://www.linkedin.com/in/dalestubblefield/
YouTube: https://www.youtube.com/@starlordnow

Mindaugas_0x
Tera Contributor

Here's what you can try:

Make sure user has canvas_user role
Make sure you have sys_ux_applicability record created in the custom app scope that you have
Make sure you have sys_ux_applicability_m2m_list record created for each list you need (and mapped to correct applicability from previous step
Make sure user has access to read table used in the list.