Restrict access to PA indicators/scores in the Scoresheet view

[LJ86]

It has come to my attention that the PA Scoresheet page seems to ignore the ACLs for the respective Indicators and Scores - I'm impersonating an (admin) user with no access to certain Indicators and Scores (verified by opening the relevant tables) who can still select these Indicators and see the related Scores when opening the PA > Scoresheet module / %24pa_scoresheet.do page.

Any thoughts on this, please?

[Kieran Anson]

Hi Lukasz,

Data collected by PA doesn't leverage ACLs from the respective table(s) data is collected from as the info could come from more than one table.

If you want to restrict access you can do this either on breakdows Control ability to view breakdown elements (servicenow.com) or on the indicator itself via the 'Access Control' tab

[LJ86]

Hi Kieran,

I have already set up ACLs on a certain type of Indicators and verified the user can't see them in the Indicator table. Yet, they are still available for selection on the Scoresheet page, which I think is a defect, so I will raise this with ServiceNow.

Thanks,

Lukasz