Getting scope error on security incident form

Ravish Shetty · 3 weeks ago

Hi all,

I am getting the error 'Read operation on table 'sn_si_calculator_group' from scope 'Security Support Common' was denied. The application 'Security Incident Response' must declare a Restricted Caller Access privilege. Please contact the application admin to update their access requests.' as seen below

I created below RCA and it did not fix it

I also created below scope privilege

the sys_db_object record for the table is as below

Any idea what can be causing this and whats the fix?

Thanks,

Ravish

andy_ojha · 3 weeks ago

Hey Ravish - Sorry for the friction here.

You have probably already create a Support Case, but if not, I'd suggest that route

These Restricted Caller access warnings are tough to diag without hands-on access

------------------------------------------------------------------------------

Are you seeing that banner, by just loading the SIR record (form view), or are you clicking one of the UI Actions, related links and seeing that?

-----------------------------------------------------------------------------

Can you share details on a few things
- Is the issue isolated to just one of your instance(s) in subprod, or are you seeing this reproduced across more than 1 instance?
- Did this start happening all of a sudden, and perhaps were any SecOps related Store Apps recently upgraded around or before this started?
-> you can reference [sys_upgrade_history] if this cropped up recently to check around that particular day
- I imagine it will trigger again, but what do you see viewing an SIR record in the Security Incident Response Workspace (hurts my heart you are in UI16, but I get it 🙂 )

-----------------------------------------------------------------------------

I'd still suggest a support case..

FWIW, I do not see that issue with SIR v14.1.2 (loading the SIR form in Classic UI)

In my instance, the Script Include (SecurityCalculator) is OOB, and I see 8 entries in [sys_restricted_caller_access], for the Source of that Script Include

Ravish Shetty · 3 weeks ago

Thank you Andy.

Yes, I have also created a case on the side.

The message is displayed on form load. I am not able to reproduce it in non production environments.

We had Australia release upgrade a week ago so not sure if this is tied to that. not sure if there was any other app installed recently.

I dont think we get this error when we check the record in SIR workspace.

Thanks,

Ravish