Cross scope privilege issue in Scoped Application

nayanparekh
Kilo Contributor

Hi,

I have created one scoped application, in which there is an UI actions which has the the condition value set as "gs.hasRole('[roleName]')".

Due to this my application states "Cross scope privilege" as "Glide API: user roles and groups"

find_real_file.png

I had submitted this application for certification, and as a feedback they stated that while loading the page (which has the UI action) they are receiving an error as stated below

find_real_file.png

I am not sure, why is this error occurring, since it already has a cross scope privilege access.

Can anyone help with this or at least let me know if I need to include any dependencies in my application to bypass this issue.

Note - For reference, I referred the below link

https://www.google.co.in/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0ahUKEwi9grSnptXQAhXGP48KHcw_D...

Thanks in Advance!

6 REPLIES 6

Raghu Manchikan
Kilo Expert

Hello Nayan,



The issue might be the "cross scope privileges" file is missing when you are publishing your app for certification.


Can you verify on cert instance if this record is available in sys metadata i.e go to application->check for tab "Application file"-> check if this record exist on this(cert) instance or not.



Regards,


Raghu



PS: Hit Like/ Helpful/   Correct depending on the impact of the response.


shloke04
Kilo Patron

Hi,



This is due to the Cross Scope Privileges issue. Cross Privileges Scope defines what functionality which is there outside your Custom Application is using which may be a script operation or something else like "ScopedGlideRecord".



Cross Scope Privileges can be checked by navigating to Applications module under System Application menu as shown below:



find_real_file.png



Select your Custom Application Name from the list of Applications loaded and scroll down to the Cross Privileges related list as shown below to check for the access whether it is Allowed or Denied for the Cross privilege record as shown below:



find_real_file.png



Check for the appropriate Cross Scope records on the status fields to verify whether the status is Allowed or Denied due to which you are getting the error in your screen shot above:



If it is denied just change it to "Allowed" to resolve your error.



find_real_file.png



Below Links may be useful:



Cross-scope privilege record



Hope this helps. Mark the answer as Correct/helpful based on impact.



Regards,


Shloke


Hope this helps. Please mark the answer as correct/helpful based on impact.

Regards,
Shloke

Hi, I moved my application from dev to test and in test i am getting the cross scope error for all cmdb_ci child tables. I don't see above options in test. from navigation if i go to my company application I can see my app but no option to see cross scope privilege there. 

shloke04
Kilo Patron

Hi,



Did you got a chance to check on the solution provided to resolve your query? If your query is Resolved please mark the answer as correct and close the thread.



Regards,


Shloke


Hope this helps. Please mark the answer as correct/helpful based on impact.

Regards,
Shloke