sys_properties can't edited
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
4 hours ago
We found that the value of the table setting within the System Property has become uneditable.
Upon investigation, we found a Write‑type ACL added by the Build Agent (Trial) application on the System Property table with the following settings:
1) The Decision Type is set to **Deny Unless**.
2) The following Data Condition has been configured:
`sys_scope=6805ff49c0eb46ee969d42f0dd56b3bf`
※The sys‑id shown above belongs to the Build Agent (Trial) application.
Due to the above settings, all system‑property records other than those owned by the Build Agent (Trial) application have become unmodifiable.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
an hour ago
Delete that ACL, or modify it to check the 'Admin overrides' box after elevating your role to security admin.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
42m ago - last edited 40m ago
Hi @caoh,
You can deactivate that ACL instead of deleting it, since it belongs to Build Agent (Trial) and keeping the record makes it easier to reverse and to report back to the app vendor. For reference on why nothing else can restore access once a Deny-Unless fails:
https://www.servicenow.com/docs/r/platform-security/access-control/acl-denial-behavior.html
thanks