Read operation on table 'sn_hr_core_case' from scope 'Global' was denied. The application 'Global' must declare a cross scope access privilege.

[Beno_t Proulx]

I have a Service Portal Page that uses the out-of-the-box "Data table from instance definition" widget to display records from the sn_hr_core_case table. I am running this on Paris version.

However, it does not work because of some scope issue which don't seem to make sense to me since it says it's denied from scope "global"... Read operation on table 'sn_hr_core_case' from scope 'Global' was denied. The application 'Global' must declare a cross scope access privilege.

So I am somewhat puzzled... I tried to query form another table and I was successful in retrieving records from the sn_hr_le_table without the cross scope problem. I have not tried other tables than that so far.

A search from Google revealed that there was the same issue (or seems very similar) that was fix in London's version.

https://docs.servicenow.com/bundle/london-release-notes/page/release-notes/quality/london-patch-7.ht...

Anyone else can replicate the issue? or may have a solution or workaround to propose?

[Beno_t Proulx · Accepted solution]

After reaching out to ServiceNow support, they pointed me in the correct direction and I was able to resolve my issue.

Turns out what I was missing was "Restricted Caller Access Privileges" (RCAP)

I needed to add RCAP records for the Base widget "Data Table" and my custom widget which is a clone of "Data table from instance definition".

Turns out those records were created by the system automatically the first time I tried to use my widget, but the status was set to "Requested". I just updated it to "Allowed". (see screenshot)

[J_47]

Hi Team,

I am getting same kind of error in one of the Custom Application but only on Test Environment.

On dev environment , we are not getting any erro.

Can anyone suggest on this ?

[R Akash]

Hello 

Even i am facing same issue. In dev i am not getting error and in test its coming. Did you get any resolution for this?

ThanksAkash

[nagydan2]

Search for this in Navigator:

"Restricted Caller Access Privileges"

Then Add column: "Status".

Check if you see any rows where Status is "Requested". -> Flip it to "Allowed".

[Teryl Hammersch]

Me too works fine in Dev, but not when moved to test Marketing Projects custom application