List View Security Constraint

[Eluther]

I am getting the following message at the bottom of my list views for ITIL users ONLY. As a result the ITIL user doesn't see all the records in the list view. This is not happening for Admins.

"Number of rows removed from this list by Security constraints: 1"

I assume this is some kind of security setting but I can't for the life of me find where it is.

Thanks!

[tony_fugere]

This is a feature of Access Controls. When the READ operation prohibits a user from seeing a record on a list, this message shows and the number of records that are prohibited by the READ operation Access Control are counted.

http://wiki.servicenow.com/index.php?title=Using_Access_Control_Rules

If your intent is to avoid seeing this message, consider a Query Business Rule instead. They provide the same functionality and do not display a message to the user. Be extra careful and test extra thoroughly when building Query BR's.

[Eluther]

Apparently the 'read' ACL on the Request table was where the limitation was coming from. Thanks for this guidance!

[tony_fugere]

If you found this answered your questions, be sure to mark the thread Answered so others searching the community know that a solid solution is provided here.

[dotika]

Hi,

I am having the same problem. I created an ACL on cmdb_ci_Business Services. It is a read only ACL. I also created a role, u_Business Services. I made the ACL i created to require this new role. When I applied the role to the ci application, the users were still able to read, write and del. so I try to drill down and apply the role only to Business Services module. Still the read, write and del permission was being granted. I removed the role from the module after testing. After that, no one with "itil" role except some one with Admin role can see any list under the B/S module. Every one without Admin right get the error "Security Constraints" error. I have deactivated the ACL and now the itil users are able to see the list in B/S, except it it not display correctly. You have to hoover over the list to get the complete text. Any, how were you able to resolve your problem. I still need to create a role that will allow read only permission to the Business Service module on cmdb_ci_Business Services. Any help will be appreciated.