Using GlideRecordSecure in a scoped application, allowing create access to ecc_queue

[Community Alums]

Hi All,

I have a script include within a scoped (store) application, that is creating records on the ecc_queue table. We have recently changed from GlideRecord to GlideRecordSecure, the function is as follows:

create : function() {
		this.addParameter('skip_sensor', true);
		var egr = new GlideRecordSecure("ecc_queue");
		egr.agent = "mid.server." + this.midServer;
		egr.queue = "output";
		egr.state = "ready";
		egr.topic = "JavascriptProbe";
		egr.name = this.name;
		egr.source = this.source;
		egr.payload = this.payloadDoc.toString();
		return egr.insert();
	},

Due to a number of ACLs on the table, this is now failing. I have created table level create/write/read ACLs within the scoped application, that should allow non-admin users with the apps role to access the table, but It's still not working. Running the security debug, I see this in the log:

Looks to me like the "out of the box" ACLs in global scope are blocking my scoped versions?

Please can someone help me understand what I need to do in order to get this working, if indeed this is possible!

Thanks!

Tim.

[Ankur Bawiskar]

@Community Alums 

did you see any cross scope privilege error?

if yes then you need to allow that

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Ankur Bawiskar]

@Community Alums 

you should create these 2 cross scope privilege records in your scoped app

Here in the screenshot I created custom app "01/23"

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Community Alums]

@Ankur Bawiskar thanks for the reply, I already have those 2 cross-scope privileges covered:

[Ankur Bawiskar]

@Community Alums 

I believe since you are using GlideRecordSecure, system will check if from other scope you have write access to the individual fields as well such as name, source, topic, payload, agent, queue, state.

Did you try creating those 7 field level WRITE ACLs in your scope with your custom app role in it?

If my response helped please mark it correct and close the thread so that it benefits future readers.