Authorise Access to Planning Console Buttons

[luke_vf_08]

Does anyone know where the security is configured to authorise access to the planning console buttons at the top of the planning console form? These are locked down for project users with it_project_manager and project_manager roles (I know it_project_manager is the only relevant one).

This is on Istanbul.  

[luke_vf_08]

Here is a screenshot of the buttons I am referring to. They are greyed out for some reason. I can't find any ACLs that would be appropriate for this, and there are several script includes that might be related, but digging through them now.

[Mwatkins]

Hm... all the buttons will be disabled by default until you select a task. However, I see that you have selected one of the tasks. In that case, the permissions ought to be whatever Access Control permissions are required to create, update, delete or read the given table.

Does the user affected have ACL permissions to update "Initiate Change Management Plan" through the normal UI? Be sure to turn on "System Diagnostics > Session Debug > Debug Security" while you are checking to see why they don't have the required permission, if that be the case. For tips about how to do this see ACL Troubleshooting - A visual beginners' guide   or What roles are required to access X? Using Session Debugging for ACL Security.

[edwajs]

Hi Luke,

When we researched this for another customer, we found out the following information from the Project Management developers:

"The Planning Console is evaluating all CRUD (create,read,update(write),delete) pm_project and pm_project_task ACLs, checking only for the it_project_manager role."

So you want to check all your create/read/write/delete ACLs on pm_project and pm_project_task ACLs, and make sure there is one for each (i.e., at least eight ACLs) with the it_project_manager role.   If you are missing create or delete ACLs with this role, you will get the same behavior from the planning console, where the controls will be grayed out or not visible because you are not permitted to manipulate the records to the desired extent.

Ed Wajs

ServiceNow Technical Support

[hamzaberouil]

Hi Ed,

Your answer is great ! Thank you .

However it seems that if the role does not have the delete rights it will not work, which is weird because giving the right to delete records (especially projects) is not a best practice.

Do you know if there is any workaround there ?

Thank you in advance.

Hamza