Public Catalog - Doesn't show the list of records in reference field.

pranavagarw
Tera Expert

Hello,

 

I have build a catalog which is accessible by public (anyone - logged in or not).
Fields are visible but there is a field which is referenced to User Table [sys_user], but it is not showing the list of records.

pranavagarw_0-1770224558927.png

So, basically when record gets submitted, it is showing updated by guest. but i have checked in access analyzer it is showing Read, query range all are Passed.

pranavagarw_1-1770224660746.png

Why it is happening (I have also build ACLs, for sys_user table that have public role for None, * both type).

 

Thank you.

5 REPLIES 5

Tanushree Maiti
Kilo Sage

 - If the issue you are getting in portal, it could for query_range acl.

- Access Analizer validate ACL on table level. check whether field level ACL is just limiting the content within the field!

- Also check if you have any Query business rule on sys_user which can filter records at database level and showing in form.

Please mark this response as Helpful and hit Like if it assisted you with your question.
Regards,
Tanushree Maiti
ServiceNow Technical Architect
Linkedin:

Yes, I am trying to do this in portal.
I have disable the only Query BR that is present in sys_user table, and also put Query range ACLs.
But it is still not working.

adityahubli
Tera Guru

Hello @pranavagarw ,

 

This happens because the catalog is running in guest/public user context, and even if table-level ACLs pass, the reference field also checks field ACLs, query ACLs, and any query business rules on sys_user. Access Analyzer only confirms table access, but guest users are usually restricted from viewing user records for security reasons, so the reference list appears empty. Check field-level ACLs on display fields, any query_range or scripted ACL, and Before Query Business Rules on sys_user.

 

If this helps you then mark it as helpful and accept as solution.

Regards,

Aditya,

Technical Consultant

I have disabled the Query BR, and also checked the field level ACLs.
Can you help me with exact steps, what should I do? If you have previously done something like this?