- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2020 09:54 AM
Hi,
I am trying to upload an attachment in the incident table using API. But I am getting below error:
status: failure The remote server returned an error: (403) Forbidden. message: Operation Failed detail: ACL Exception Insert Failed due to security constraints
I am using non-admin user and don't know which ACL rules operation should be applied to which table. So, that user can upload the attachments
Could anyone please help me ?.
Thanks!
Solved! Go to Solution.
- Labels:
-
Security Incident Response
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-28-2021 12:31 AM
Working:
Added below ACL and now able to upload the attachment:
- sys_attachment_doc (create)
- sys_attachment (create)
- ecc_queue (create)
For Downloading attachment provided below ACL:
- sys_attachment_doc (read)
- sys_attachment (read)
- ecc_queue (read)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-20-2020 09:39 AM
Hi Shubham,
this error occurs when that user doesn't have access to write or create on that table
Since that user is not able to create/edit table record attachment cannot be added.
please ensure this user has valid role that is present on table None Create & Write ACL
Once you give that non-admin user the proper role that user should be able to add attachment
Mark ✅ Correct if this solves your issue and also mark 👍 Helpful if you find my response worthy based on the impact.
Thanks
Ankur
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-20-2020 11:54 PM
Hi
This User can create and edit tables using API but cannot add the attachment to the table.
Thanks,
Shubham
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2020 12:36 AM
Hi Shubham,
check any before insert BR on sys_attachment table which restricts adding attachment
Since you told this user is able to created or edit record; please check whether this user is able to add attachment from the record itself using paper clip icon
Regards
Ankur
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2020 02:10 AM
HI,
There will be an acl which restrict that user to add attachment. check acl on attachment table and not incident table.
Thanks,
Ashutosh
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2020 08:45 PM
Hi,
try adding "itil" role to user which you are using while calling this API and check.
