Is there any Special backend access controls on sys_choice and sys_user_has_role table???

mandy2
Kilo Contributor

Hello Everyone,

Do anybody know if SNOW has any backend controls on sys_choice and sys_user_has_role table? I have a client script need to query data from the two tables, but always get failed to set values. So I am thinking probably the ACL restricted the access to the table.

OOB ACL on sys_choice table, specified   the 3 roles

1.png

So I disabled all the OOB read ACLs on sys_choice, and new create one to let every one can read record, didnt speficy any role.

2.png

Then I test the access by using a client script

3.png

while when I impersonate to user who only has hr_agent role, alert pop up, but unable to retrive the value from sys_choice table, even I new create the ACL to let every one have access on sys_choice table.

4.png

But If I keep disable OOB ACLs, and add one of the specified role, i.e. Personalize to test user, then the alert can pop up with the correct value which retrived from sys_choice table.

5.png

So I am thinking probably SNOW have access controls on sys_choice table somewhere else. similar   issues for sys_user_has_role table.

Do anyone have any ideas or suggestions on this? Thanks in advance.

8 REPLIES 8

Can you mark the post as helpful or answered if the case?



Regards,


Sergiu


I don't have the whole picture here but it's generally a bad practice (at least from my point of view) to modify ACLs for a client script specially when this kind of query (if really necessary) should be performed on the server side and sent back to the client side by Ajax.



Best regards


Hi David,



Thanks for your advice.


Yes, as I am newer both in developing and SNOW, this is the first step just want to verify my script can pull data correctly from the target tables.


Next step, I'd like to work on use Ajax and script Includes to optimize the function.


david_legrand
Kilo Sage

Use GlideAjax to perform the script on the server side and on the client side, you would have just to manage the answer