Security (ACLs) for Archived Tables - assistance needed

[Rob Sestito]

Hey SN Comm Team,

I am running into an issue/security restraint with archiving tables.

I have created Archiving Rules for each COE/Table we have. Now that I have rules in place, I see all the Archive HR Table Applications through my filter navigator:

The Highlighted tables however are giving me a security message:

Doing some research, I landed here: Data archiving - specifically, the information regarding Archive tables and ACLs.

Our system did not have the system property 'glide.security.enable_archive_table_acls' - I have created this.

I am able to get to where the archived tables are to attempt to create ACL(s) to give me access. However, they do not show up for selection when on the ACL form.

Anyone know about this security restraint and how I can fix?

Cheers,

-Rob

[Willem]

Hi Rob,

As these are HR related tables, could it be that you need to select a different (HR) scope in order to create the ACL? In addition you need to be an HR Admin as well as System admin.

One other place I would check are the COE Security Policies (HR Administration -> COE Security Configuration), but I doubt it would cause this issue. But better safe the sorry.

Addition: Are the Tables that cause you issues for Acticve COE's? You can check via HR Administration -> COE Configuration

[Rob Sestito]

Hey Willem,

I have the proper roles and elevated security admin. Here is a list of them all:

For the COE Security Policies, I see the following:

Seeing that I have no issues with most of the archive tables for HR, I am not sure this could be my issue.

The only COE not active is the Benefits COE due to not having any active HR Services within it (I checked with my team and we probably (current moment) are not going to be using the Benefits COE).

Thanks,

-Rob

[Willem]

Hi Rob,

From your screenshot I see a difference in Domain. Can you check on the tables that cause an issue if they are in a different Domain?

It would help if we can figure out what the tables that you do not see have in common, as well as why you are able to see some of the other HR Archive tables.

[Rob Sestito]

Hey Willem,

Yes I noticed that as well and did change domains and applications to see if that would help and it did not.

Part of the okay news with this, is that we are not currently using the COEs that I cannot get to for this. But, it would be good to figure out why this is happening and how to correct it for the future when we do use them.

Thanks,

-Rob

[Rob Sestito · Accepted solution]

We will not be using the COEs mentioned that I could not get access to. Closing this post as it is no longer needed.

Thanks for the help,

-Rob