Issue with inactive fields showing up in filter

[jberk]

I have an instance that is for some reason showing inactive fields still in the filter list. Curious if anyone knows where this is being controlled from so we can fix it?

[Chuck Tomasi]

While related, but not an answer...

Your sysparm_query... Shouldn't that be active=true (or active%3Dtrue)??? It's showing closed as well because your query is invalid.

Also, there's an ACL operation called add_to_list, which allows people to add the field to a list (similar for report_on). I'm wondering if we have any of those getting involved.

[jberk]

Yes in that last screen shot I have updated the query in the URL to demonstrate that you can get around the script based ACL by simply changing the query's condition.   Basically clicked on open incidents, it threw the error message you see in the 3rd screenshot down and then when I updated the sysparm to be active*true it returns all the results.

The report on ACL is only valid at the table level and the add to list ACL would just stop folks from being able to add it to the list view via the gear menu I believe.

What is being shown above is basically a way to work around ACL's no matter how they are configured from what I can gather... 😞

[Pradeep Sharma]

Hi Joshua,

Interesting. I am able to reproduce this on my Geneva instance.

I will debug and let you know if I have any info on this.

[jberk]

Yes I just did the same on my personal dev instance, uploaded some images. Thanks guys!

[Chuck Tomasi]

I'm guessing it's a Geneva thing because I don't see it in Helsinki.