New Security Attributes found as result of Servicenow mass update of query_range ACLS

Sruthi17
Mega Sage

Hi Experts,

 

We suddenly experienced new query_range ACLs mass created by Servicenow in our instance and as a result we see multiple security attributes something like show below

Sruthi17_0-1747216863595.png

And when I open one of them, I see something like below 

Sruthi17_1-1747216889626.png

And the script include "SNCAPICallWrapper" is not found in our instance as well

Because a lot of ACLs are using these security attributes I wanted to understand what it means/what it evaluates to? But I dont really understand what this is? I cannot find something related to this in community as well. Can someone help me in understanding what this Security Attribute evaluate?

Thanks in advance

 

6 REPLIES 6

laxmiL
Giga Contributor

Hi @Sruthi17  Did you find any solution for "SNCAPICallWrapper" script include. I am also facing the same issue i couldn't find script include our instance. So can you please let me know the steps you followed.

Not applicable

Hi

 

Navigate to script include , search a name as SNCAPICallWrapper it will be there.

 

This is the script:

 

var SNCAPICallWrapper = Class.create();
SNCAPICallWrapper.prototype = Object.extendsObject(AbstractAjaxProcessor, {

    // work-around for making GlideSecurityManager.get() call available from scoped apps
    hasRightsToConditionalTableQueryRange: function(tableName) {
        var path = 'record/' + tableName + '/conditional_table_query_range';
        var gsm = global.GlideSecurityManager.get();
        return gsm.hasRightsTo(path, new GlideRecord(tableName));
    },

    // make isImpersonating available from all scopes
    isImpersonating: function() {
        return  new GlideImpersonate().isImpersonating();
    },

    // make gs.getUser().hasRoles() available from all scopes
    gsGetUserHasRoles: function() {
        return gs.getUser().hasRoles();
    },

    //special case: HI has script-include named hasRole which results in flaggin scrits as having "current"
    gsHasRole: function(roleName) {
        return gs.hasRole(roleName);
    },

    //special case: HI has script-include named hasRole which results in flaggin scrits as having "current"
    gsGetUserHasRole: function(roleName) {
        return gs.getUser().hasRole(roleName);
    },

    // scope issue: gs.getUser().getRoles().length should be replaced with gsGetUserGetRolesSize()
    gsGetUserGetRolesSize: function() {
        return gs.getUser().getRoles().size();
    },

    type: 'SNCAPICallWrapper'
});
 
DeebikaS1775775_0-1784831127540.png