Interested in a ServiceNow event built for developers? Registration for now[dev]26 is officially open!

sys_properties can't edited

caoh
Tera Contributor

We found that the value of the table setting within the System Property has become uneditable.

 

Upon investigation, we found a Write‑type ACL added by the Build Agent (Trial) application on the System Property table with the following settings:
1) The Decision Type is set to **Deny Unless**.
2) The following Data Condition has been configured:
`sys_scope=6805ff49c0eb46ee969d42f0dd56b3bf`
※The sys‑id shown above belongs to the Build Agent (Trial) application.

Due to the above settings, all system‑property records other than those owned by the Build Agent (Trial) application have become unmodifiable.

 

2 REPLIES 2

Brad Bowman
Mega Patron

Delete that ACL, or modify it to check the 'Admin overrides' box after elevating your role to security admin.

IbrarA
Tera Guru

Hi @caoh

You can deactivate that ACL instead of deleting it, since it belongs to Build Agent (Trial) and keeping the record makes it easier to reverse and to report back to the app vendor. For reference on why nothing else can restore access once a Deny-Unless fails:
https://www.servicenow.com/docs/r/platform-security/access-control/acl-denial-behavior.html

 

 

thanks

ibrar