I am getting a security restriction error when I run gliderecord query to syslog table from scoped-app in San Diego

kyciranne
Giga Expert

I am getting an error when I run gliderecord query to syslog table from scoped-app in San Diego

Security restricted: When targeting a global resource, only ServiceNow authored scopes are allowed as sources

Couldn't decipher the stack trace resulting from the following JavaScriptException:
com.glide.script.fencing.access.ScopeAccessNotGrantedException: read access to syslog not granted: org.mozilla.javascript.JavaScriptException: com.glide.script.fencing.access.ScopeAccessNotGrantedException: read access to syslog not granted: org.mozilla.javascript.Context.makeJavaScriptException(Context.java:1952)

1 ACCEPTED SOLUTION

Hi @kyciranne 

thanks for the feedback. This is something new to me.

To access the syslog table your only workaround is the create a "proxy" script include in the global scope.

Watch the following video: https://www.youtube.com/watch?v=yx23wKB7uYM

Kind regards
Maik

View solution in original post

7 REPLIES 7

Maik Skoddow
Tera Patron
Tera Patron

Hi @kyciranne 

check whether the following configuration is set on the config record of the syslog table

find_real_file.png

Kind regards
Maik

kyciranne
Giga Expert

Thanks Maik, there is a new implementation of ServiceNow on the syslog table where they added caller restriction on the table

find_real_file.png

Hi @kyciranne 

thanks for the feedback. This is something new to me.

To access the syslog table your only workaround is the create a "proxy" script include in the global scope.

Watch the following video: https://www.youtube.com/watch?v=yx23wKB7uYM

Kind regards
Maik

Of special note here: as of San Diego I could create that proxy/wrapper script inside a Global studio application.  As long as the application was created with a Global scope, ServiceNow was able to use the wrapper function as shown here.  However, as of Tokyo this no longer is the case.  It must be "fully Global" to operate as a wrapper for enabling cross-scope access.  Otherwise you will still get the message "When targeting a global resource, only ServiceNow authored scopes are allowed as sources"


The opinions expressed here are the opinions of the author, and are not endorsed by ServiceNow or any other employer, company, or entity.