Field level ACL is not working in Service Portal

[pooja V1]

Hello,

We are having issues with ACL in service portal. There is a ACL on field 'Issue' on knowledge Article table. It is a read ACL which gives access to users with 'itil' role. When a user without itil role views the article in service portal or in 'kb_view' page in platform the issue field is also visible. The ACL is not restricting the field from view. 

Anyone has any idea if ACL's on field level doesn't work in Service Portal or can it be achieved in any other way?

[Sumanth16]

Hi @pooja V1 ,

If it is a customized widget, you can add canRead() in your widget code.  canRead() validate access controls on that particular table for that user.

Please check the following documentation:

https://developer.servicenow.com/dev.do#!/reference/api/utah/server/no-namespace/c_GlideElementScope...

If I could help you with your Query then, please hit the Thumb Icon and mark it as Correct !!

Thanks & Regards,

Sumanth Meda

[pooja V1]

It is not a custom widget it is OOB.

[Sumanth16]

Hi @pooja V1 ,

Enable Debug security rules and impersonate as a user with ITIL role and in other browser enable debug security rules  and impersonate as user without ITIL role. Check which read acls are executed and open each acl and check. You need to debug this issue.

Thanks & Regards,

Sumanth Meda

[James Chun]

Hey @pooja V1,

Have you validated that the non-itl users can view the 'Issue' field in the backend?

If they can, it's the ACL, not the widget that is causing the issue.

Cheers