Using GlideRecordSecure in a scoped application, allowing create access to ecc_queue

[Community Alums]

Hi All,

I have a script include within a scoped (store) application, that is creating records on the ecc_queue table. We have recently changed from GlideRecord to GlideRecordSecure, the function is as follows:

create : function() {
		this.addParameter('skip_sensor', true);
		var egr = new GlideRecordSecure("ecc_queue");
		egr.agent = "mid.server." + this.midServer;
		egr.queue = "output";
		egr.state = "ready";
		egr.topic = "JavascriptProbe";
		egr.name = this.name;
		egr.source = this.source;
		egr.payload = this.payloadDoc.toString();
		return egr.insert();
	},

Due to a number of ACLs on the table, this is now failing. I have created table level create/write/read ACLs within the scoped application, that should allow non-admin users with the apps role to access the table, but It's still not working. Running the security debug, I see this in the log:

Looks to me like the "out of the box" ACLs in global scope are blocking my scoped versions?

Please can someone help me understand what I need to do in order to get this working, if indeed this is possible!

Thanks!

Tim.

[Ankur Bawiskar]

@Community Alums 

With only those 2 cross scope, I was able to insert record into ecc_queue from my custom app from background script. I didn't create any explicit field level WRITE ACL in my scope

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Community Alums]

@Ankur are you using a user without the admin role?

[Ankur Bawiskar]

@Community Alums 

I ran the background script with admin user

Did you check my previous reply?

[Community Alums]

@Ankur Bawiskar I missed that reply! So, I've tried to create field level ACLs, I'm getting an error:

[Ankur Bawiskar]

@Community Alums 

that's correct.

You cannot create field level WRITE for outside scope fields

Those fields are in global scope and you are not allowed to create ACLs on those in your scope