Enable work order management query rules for service organizations [New in Security Center 1.5]

Use the sn_fsm.use_query_rules property to apply rules and filters to the Field Service Management tables.

When the sn_fsm.use_query_rules property is set to true, the rules and filters from the sn_query_rule table will be used to determine read access to Field Service Management tables of authenticated users. It does this through query business rules and Read ACLs. When this property is set to false, the records won't be filtered based on query rules. Query business rules add additional security validations when enabled on this property, and they will filter records for agents, qualifiers, and dispatchers based on their assigned territory or territory membership. This implements the principle of least privilege when reading records.

More information

Attribute	Description
Configuration name	sn_fsm.use_query_rules
Configuration type	System Properties (/sys_properties_list.do)
Data type	boolean
Recommended value	false
Default value	false
Category	Access control
Security risk	Severity score: 4.3 CVSS score: Medium Security risk details: When this property is set to true, rules and filters from sn_query_rule will be used to determine read access to Field Service Management tables implementing the principle of least privilege. When set to false, the records won't be filtered based on query business rules and may have an increased risk of data exposure from Field Service Management tables.
Dependencies and prerequisites	None
Functional impact	When set to true, rules/filters from sn_query_rule table will be used to determine read access to Field service management related tables. For example, Work Order (WO) and Work Order Table (WOT) to the logged-in user through query business rules and READ ACLs. When false, the records won't be filtered based on query rules. Enabling this property secures the data, and all data (wm_task and wm_order) won't be visible to their users.
References