- Mark as New
 - Bookmark
 - Subscribe
 - Mute
 - Subscribe to RSS Feed
 - Permalink
 - Report Inappropriate Content
 
‎06-19-2020 09:54 AM
Hi,
I am trying to upload an attachment in the incident table using API. But I am getting below error:
status: failure The remote server returned an error: (403) Forbidden. message: Operation Failed detail: ACL Exception Insert Failed due to security constraints
I am using non-admin user and don't know which ACL rules operation should be applied to which table. So, that user can upload the attachments
Could anyone please help me ?.
Thanks!
Solved! Go to Solution.
- Labels:
 - 
						
							
		
			Security Incident Response
 
- Mark as New
 - Bookmark
 - Subscribe
 - Mute
 - Subscribe to RSS Feed
 - Permalink
 - Report Inappropriate Content
 
‎04-28-2021 12:31 AM
Working:
Added below ACL and now able to upload the attachment:
- sys_attachment_doc (create)
 - sys_attachment (create)
 - ecc_queue (create)
 
For Downloading attachment provided below ACL:
- sys_attachment_doc (read)
 - sys_attachment (read)
 - ecc_queue (read)
 
- Mark as New
 - Bookmark
 - Subscribe
 - Mute
 - Subscribe to RSS Feed
 - Permalink
 - Report Inappropriate Content
 
‎06-23-2020 10:06 AM
These links should help you debug:
https://docs.servicenow.com/bundle/madrid-platform-administration/page/administer/contextual-security/concept/c_AccessControlRulesDebug.html
https://hi.service-now.com/kb_view.do?sysparm_article=KB0523743
Have you customized any of the Out-of-Box (OOB) ACL rules or created your own?
Does the syslog provide any more detail for the specific ACL that fails?
Have you looked at the "Attachment API" with the "REST Endpoint" type? It is not active on my instance but it might be on yours.
- Mark as New
 - Bookmark
 - Subscribe
 - Mute
 - Subscribe to RSS Feed
 - Permalink
 - Report Inappropriate Content
 
‎04-28-2021 12:31 AM
Working:
Added below ACL and now able to upload the attachment:
- sys_attachment_doc (create)
 - sys_attachment (create)
 - ecc_queue (create)
 
For Downloading attachment provided below ACL:
- sys_attachment_doc (read)
 - sys_attachment (read)
 - ecc_queue (read)
 
