Map Page Issue

[isaacshafer]

Hi folks, I've created a map page in the cmn_map_page table and it works and displays as expected. However once I impersonate certain people, the map page is blank and in the console there is an error message saying 404 not found shown below.

Map page as I'm impersonating a userConsole message

I've tried using the 'debug security rules' tool and from what I can tell the person I impersonate is passing the necessary checks to see the map page. It seems to me that it is some kind of issue with roles/ACL because when impersonating other users with the same or similar roles that I have (which includes admin privileges) the map page still works fine as shown below, though I have not been able to pinpoint which roles actually allow the access.

I've already ensured that the user I've been testing with has enough access to read the necessary records on the location table which is where the map page pulls its data from. I haven't been able to find anything helpful online yet about map page security so any advice or ideas of where to look is greatly appreciated. Maybe there is a better method for checking roles and ACLs that I don't know about? Thanks in advance

[James Chun]

Hey @isaacshafer,

I could be wrong, but I am not sure if this is related to not having access to the map page or the records displayed on the map.

Looking at the console log, it seems there is an issue with the Google Map API.

Also, when I tested in my PDI, users without any role could still open the map page and see the markers (if they have access to the records, e.g. cmn_location).

My guess is that if this is ACL-related, you would get a different error/page other than the blank grey page as in your case.

If the users don't have access to the markers/records in the map, you would still see the map but with no markers.

A few options to explore:

• Grant the admin access to the user who doesn't have access to the map. If the user is able to access the map afterward, it definitely has something to do with the role
• How did you configure the Google Map connection? Did you follow the ServiceNow documentation? https://docs.servicenow.com/bundle/washingtondc-platform-user-interface/page/administer/navigation-a...
• In the Network section of the dev tool, check the status of the outbound requests. It may provide additional information on why the requests are failing

Cheers

[isaacshafer]

Hi James, thanks for the response.

I agree, I think I would be seeing a different error message or page if it was ACL related. But with that said I did as you suggested and granted the admin role to my test user and the user was then able to see the map and markers indicating that it probably is a role/ACL issue, I just haven't been able to figure out which role or which ACL.

I'll spend some time looking into our google map connection, perhaps there is some sort of misconfiguration there as well.

[James Chun]

Hi @isaacshafer,

Sorry if I didn't make myself clear in my previous comment.

What I was trying to say is that it seems like it's not that the user does not have access to the map page or the records shown on the map but rather it's more to do with the API or some script running on the page.

Maybe you have some role restrictions with the outbound REST API or accessing some APIs within ServiceNow.

Cheers

[James Piveta]

Hi @isaacshafer 

I had the same problem, and I found a way to solve it: A Read ACL on the 'cmn_map_page' table.

Check if this solves your problem too!