I am on my PDI nerding out to see what options I have for adding on to GRC in the future. I decided to play around with extending Entities to see how I can make something work (I called it core) and this is in a scoped application called CRMS.
When i execute the following code from the grc: profile scope
var gr = new GlideRecord('x_803967_crms_core');
gr.get('f8849aa11b00d910bea4fcc6cc4bcb4d');
gr.setValue('cmdb_ci', '');
gr.update();
I get the following error:
Access to api 'setValue(x_803967_crms_core.cmdb_ci)' from scope 'sn_grc' has been refused due to the api's cross-scope access policy
Write operation against 'x_803967_crms_core' from scope 'sn_grc' has been refused due to the table's cross-scope access policy
I made sure that all applicable tables had the correct "Application Access", made sure it was accessible from all scopes, and it had the Can read, Can create, Can update, and Can delete checked.
I added the following "Application cross-scope access" as well as
Source Scope: GRC: Profile (have that app scope chosen)
Target Scope: CRMS
Target Name: x_803967_crms_core
Operation: Write
Status: Allowed
I even did the following too:
Source Scope: GRC: Profile (have that app scope chosen)
Target Scope: CRMS
Target Name: x_803967_crms_core.cmdb_ci
Operation: Write
Status: Allowed
