
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-29-2014 04:10 AM
I'm trying to figure out the functionality behind glide.sys_reference_row_check. Having read the explanation on wiki, I understood all the words, but cannot understand the meaning of the phrase 😃 Can anyone bring an example of how system behaves differently depending on this property being true or false?
Thanks in advance!
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-30-2014 01:38 AM
Hi Valentina,
Taking example above: if you don't have read access to cmdb_ci, but have access to incident table - you still will see field "Configuration Item" on the incident form and selected CI there (display value only).
But with "glide.sys_reference_row_check" set to true - "Configuration item" will be removed from the incident form completely.
Hope this helps!
Kyryl
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-29-2014 04:24 AM
See if you have table(say: incident), It again will have a reference field 'Configuration Item' , which is a different table (cmdb_ci).
If this property is false:
Then the acl's script(we can write script in acl also) will be ignored for the cmdb_ci table.
If value is true:
This will not ignore the script part of the acl of cmdb_ci table.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-30-2014 01:38 AM
Hi Valentina,
Taking example above: if you don't have read access to cmdb_ci, but have access to incident table - you still will see field "Configuration Item" on the incident form and selected CI there (display value only).
But with "glide.sys_reference_row_check" set to true - "Configuration item" will be removed from the incident form completely.
Hope this helps!
Kyryl

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-01-2014 02:57 AM
Hi all. Thanks for the answers. Ok, it makes sense to me now. I just wasn't sure that I could interpret this behavior like that. Because it seems to be a big security gap, since it's "false" by default...