"My Work" throwing a security constrains error.

[BrianProvencher]

Starting this morning, several people are having issues accessing the "My Work" link in ServiceNow. This is in the Self Service application and links to the task table with a dynamic filter to show work items for the logged in user. They're receiving the "Security constraints prevent access to requested page" error. The same behavior occurs when they try to access the Task table. I did some digging and figured out it was an ACL denying access. When I grant the sn_collab_request.basic_read role, it gives them the access they need. Has anyone else run into this issue? The only thing I can think of is that I updated the Collaborative Work Management application this morning, could that have caused the issue?

[BrianProvencher]

The only updates on that table during that timeframe were application updates.

[Bob Ascherl]

we are seeing this same issue randomly with some users as well.  it appears to only be related the 'my work' and after some time it starts working again without any intervention.  we are struggling to replicate it to debug the sessions.  impersonation doesn't always correlate and since it seems to 'fix' itself we have yet to pinpoint a cause.  ACLs on Task have not changed and the users are still able to access the table in other ways.

[BrianProvencher]

I opened a case with ServiceNow and they basically closed it with no action saying it wasn't reproducible. Guess it will remain a mystery!

[Bob Ascherl]

support informed us that this may be related to PRB1915184

[Bob Ascherl · Accepted solution]

support provided us the following workaround...

Issue:
Service Management My Work Giving Users Security Constraints Message

Steps to Reproduce:
1. My Work or My Groups Work under Service Management nav module
2. Users can also attempt to view task table

Most Probable Cause:
You are most probably hitting into this PRB: PRB1915184

Solution Proposed:
The workaround is to create the property

'glide.security.enable_detailed_table_level_acl_check'

.Set property

"glide.security.enable_detailed_table_level_acl_check"

to false to skip the detailed hierarchy checks for the initial table access decision. This will check the direct table for roles and security attributes to determine initial table access. READ operations on the records/fields will remain unaffected.for now. And, our dev team internally create a problem (i.e., PRB1915184) for permanent fix.