how do I debug an ACL in service portal?

[Bj_rn G]

I have an ACL that only applies to customer contacts and it isn't working as I expect. I can't apply the ACL to an internal user to view how it behaves, so how can I debug the ACL inside the service portal? I tried to put a log message into the "advanced" script in my ACL, but that has not appeared in the logs, and I can't think of another way to get debug output from the ACL evaluation for a user in a (customer facing) service portal.

[Bj_rn G]

All that I can tell is that the ACL is not being applied, because the Case records it should grant access to are not visible. In theory the conditions on the ACL should allow a specific subset of Cases to be viewed. I created a new role that grants access to specific rows based on a set of conditions that apply to 20 rows in my test instance. When you say "back end view of the form", what do you mean?

[kente · Accepted solution]

You might be able to do this.

Go to 'Debug Security' - and open the "avaible here" in a new tab.

Impersonate the user that your want to test the ACL on the portal

After you have triggered what ever page/widget you should refresh the "Avaible here" tab.

[Bj_rn G]

I never see that "available here" link, do I need to enable it somehow?

[Bj_rn G]

Unfortunately I'm still on Kingston, and it looks like this "available here" feature was added in London.  <sad face>

[Aleksas Kucins1]

Hi,

You can use all ServiceNow Debug functionallity, including ACL debug, in Service Portal.

This works on Kingston as well.

Link to my blog post: https://servicenowthink.wordpress.com/2019/05/26/how-to-use-servicenow-platform-system-diagnostics-d...