Brazil upgrade - error with field encryption starter

Tom Brown
Giga Guru

We installed Brazil patch 0 on one of our sandboxes to do an evaluation.  We started seeing an error pop up in SOW and other areas.  "Execute operation on API 'Glide API: string utilities' from scope 'Field Encryption Starter' was denied. The application 'Field Encryption Starter' must declare a cross scope access privilege. Please contact the application author to update their privilege requests."

 

Some buttons didn't render, although I can't confirm it was due to this same issue.  Brazil patch 1 did not resolve it, and we opened a case with ServiceNow.  They rolled it into PRB2078372.  Field Encryption Starter is a private application, but I could see where there were several cross-scope privileges defined as part of the application even though I couldn't edit or add one in that scope.  I eventually tried to repair the field encryption starter application, and it resolved the red box and the buttons came back.  We have asked if this is the permanent solution or will we see this come up again.  SN is still looking into it at this time.  But in case anyone else sees this box, you might try the repair yourself.

 

TomBrown_0-1791903439197.png

 

edit:  a curious observation is that in our Zurich instances, the Field Encryption Starter plugin shows 76 files under version 1.0.0.  In the Brazil one that I 'repaired', it shows 564, also in version 1.0.0.  Maybe 30 cross scope privileges in the repaired one, only 10 in our Zurich instances.  Running the repair on the Zurich nonprod resulted in 77 files total, still 10 cross scope privileges.  so v1.0.0 in Brazil is different than v1.0.0 in Zurich, for whatever that's worth.

7 REPLIES 7

AndrzejP
Tera Contributor

'Field Encryption Starter' is private and most likely can't be edited. You can check it via sys_scope_privilege_list.

Find 'Field Encryption Starter' related records and Target name = Glide API: string utilities. Status filed should be Allowed. If you have "Requested" that may be the source of issue. I think ServiceNow support may update it on demand. 

They confirmed to include the permanent fix in Brazil Patch 2 set for release on 2026-11-05.

They updated our Case to say that too.  Ours continues to be resolved from the 'repair' of the plugin.

AndrzejP
Tera Contributor

'Field Encryption Starter' is private and most likely can't be edited. You can check it via sys_scope_privilege_list.

Find 'Field Encryption Starter' related records and Target name = Glide API: string utilities. Status filed should be Allowed. If you have "Requested" that may be the source of issue. I think ServiceNow support may update it on demand. 

They confirmed to include the permanent fix in Brazil Patch 2 set for release on 2026-11-05.