Write ACL Not Working on passing property

ABC6
Tera Contributor

Hello Team,

I have a requirement where i need to restrict the itil user write permission for few records, for which i did create a write acl and Write the script like this but it is not picking up the property Value

 

ACL Script:

if(gs.hasRole('itil') && gs.getProperty('cmpy.write'))
{
    answer=true;
}
 
Property SS:
 
ABC6_0-1722597405201.png

 

1 ACCEPTED SOLUTION

Hello @ABC6 ,

 

You can use below path to activate Access Analyzer in your instance. Only system administrator role is required, no special permission is needed as it does not impact your instance.

 

App. Navigator > System defintion > Plugins > Search access analyzer and install it.

 

Begin your troubleshooting. Hope it helps.

 

Mark this as Correct/Helpful if above info. helps in any way and help in closing this thread.

 

Regards,

Shubham

View solution in original post

10 REPLIES 10

@ABC6 Check if there is already another write ACL on Company Property. None which is allowing the write ACL on the table to itil role.

 

The best way to debug such issues is using the Access Analyser. I recommend using it.

i am not sure if access analyzer is been active in my instance,I have checked already there is no other Write ACL

Hello @ABC6 ,

 

You can use below path to activate Access Analyzer in your instance. Only system administrator role is required, no special permission is needed as it does not impact your instance.

 

App. Navigator > System defintion > Plugins > Search access analyzer and install it.

 

Begin your troubleshooting. Hope it helps.

 

Mark this as Correct/Helpful if above info. helps in any way and help in closing this thread.

 

Regards,

Shubham

ShubhamGarg
Kilo Sage

Hello @ABC6 ,

 

What I could notice is, the name of System property is not matching the property name you have passed in the script of ACL. If you could correct it, should work for you.

 

For general ACL specific troubleshooting, ServiceNow has introduced a new capability in Vancouver release, i.e., Access Analyzer. You can check all the accesses for any given user by passing resource details.

 

I hope it helps.

 

Mark this as Correct/Helpful if above info. helps in any way and help in closing this thread.

 

Regards,

Shubham

ABC6
Tera Contributor

I already renamed that property to what i have mentioned over ACL.