Enable work order management query rules for service organizations [New in Security Center 1.5 and updated in 2.0]

  • Release version: Yokohama
  • Updated January 30, 2025
  • 1 minute to read
  • Use the sn_fsm.use_query_rules property to apply rules and filters to the Field Service Management tables.

    When set to true, rules/filters from sn_query_rule table will be used to determine read access to Field Service Management-related tables (Work Order and Work Order Task) to the logged in user through query business rules and read ACLs. When false, the records won't be filtered based on query rules. Query business rules add additional security validations. Specifically, this property will filter records for agents, qualifiers, and dispatchers based on their assigned territory or territory membership. It is best practice to follow the principle of least privilege when reading records.

    Set the sn_fsm.use_query_rules system property to true.

    More information

    Attribute Description
    Configuration name sn_fsm.use_query_rules
    Configuration type System Properties (/sys_properties_list.do)
    Data type Boolean
    Recommended value true
    Default value false
    Category Access control
    Security risk
    • Severity score: 4.3
    • CVSS score: Medium
    • Security risk details: There may be increased risk of data exposure from Field Service Management tables.
    Dependencies and prerequisites None
    Functional impact

    When set to true, rules/filters from sn_query_rule table are used to determine read access to Field service management related tables. For example, Work Order (WO) and Work Order Table (WOT) to the logged-in user through query business rules and READ ACLs. When false, the records aren't filtered based on query rules.

    Enabling this property secures the data, and all data (wm_task and wm_order) won't be visible to their users.

    References Field Service Management reference