Cell Edit Mode - 'Security prevents writing to this field'

rushputin
Mega Expert

I'm having an issue where a non-admin user cannot edit a field in cell-edit mode.   They can edit it okay from the record, but not the list.   On double-clicking on the cell, or clicking on the cell and hitting Enter, it just hangs.   Selecting multiple cells and doing the same produces the 'Security prevents writing to this field' message.

 

It's clearly due to security (because the admin can edit it just fine)... but the ACLs look correct (they were generated when the table was created, and grant create, delete, write, list_edit, and add_to_list to a role the user has).   Similarly, the List Control gives that same role Edit and Link permissions and is set to List edit type: 'Save Immediately (cell edit mode)'.

 

The only possible complicating factor is that this is on a many to many table, but I can't see how that could be responsible.

 

So: what security setting am I missing?

12 REPLIES 12

I'm very new to ServiceNow (in production less than two months) and don't know how to execute what you're suggesting.   Can you provide more details?


Hi Anthony,



You can enable debugging by clicking on the link shown below.



debug security.png


So, I was able to resolve this a while back.   In the end, I blew away the Access Controls, recreate them via the Table page, and then explicitly set the list_edit ACL.



I'm not sure if clearing out the existing ACLs contributed to fixing it (probably not).


Jacob_Andersen
ServiceNow Employee
ServiceNow Employee

If is not due to an ACL, then look at the dictionary record for that field and see if the 'Read Only' checkbox is checked (this field may need to be added to the form when viewing that column's dictionary record).   I have noticed that in Dublin+, a lot of OOB fields are marked read-only this way instead of via an ACL.



For the record, I think it's better to make a read-only field using ACL's or you get this kind of confusion.


The field is definitely not read only.   All itil users can update the field for inidividual records inside the form.   They're trying to assign multiple incidents to themselves via the list view by selecting mulitple records in the assigned to field, then double-clicking to enter their name.   As the Admin of the instance, I have no problem doing this.   I need the itil users to be able to do this.