findings while scanning update set

servicenow14710
Tera Expert

I have finding as- Access Controls on Client callable Script Includes while scanning an update set before completing,How can i remove this . any suggestion is appreciated.Thanks.

1 ACCEPTED SOLUTION

Sid_Takali
Kilo Patron
Kilo Patron

Hi @servicenow14710 basically Access Controls on Client callable Script Includes means for which role this Client Callable Script Include needs to be trigger. Consider I have a Callable Callable Script Include and I have created ACL on it for "admin" role. Now the user who have "admin" role for them only the Client callable Script Include will trigger. 

 

You need you create a "client_callable_script_include"type on "execute" operation ACL on your Client Callable Script Include. Now you will able to remove the finding.

Refer below screenshots

SiddharamTakal_0-1686852143411.png

SiddharamTakal_1-1686852235636.png

Please don't forget to mark reply Helpful/Correct, if applicable

Regards,

Siddharam

 

View solution in original post

1 REPLY 1

Sid_Takali
Kilo Patron
Kilo Patron

Hi @servicenow14710 basically Access Controls on Client callable Script Includes means for which role this Client Callable Script Include needs to be trigger. Consider I have a Callable Callable Script Include and I have created ACL on it for "admin" role. Now the user who have "admin" role for them only the Client callable Script Include will trigger. 

 

You need you create a "client_callable_script_include"type on "execute" operation ACL on your Client Callable Script Include. Now you will able to remove the finding.

Refer below screenshots

SiddharamTakal_0-1686852143411.png

SiddharamTakal_1-1686852235636.png

Please don't forget to mark reply Helpful/Correct, if applicable

Regards,

Siddharam