Loading...
Loading...
In list view of Problem Table, LIST_EDIT operation ACL for a choice-type field is not working since Quebec, allowing users without specific roles to edit fields in list view without having access to edit the field inside the record. The custom ACLs for the write operation work fine for the specified choice field but a custom ACL for the list_edit operation for the same choice field does not restrict the ITIL users to edit, which it should have based on failing the required role. ITIL users are able to perform the list_edit operation without passing the ACL, without admin role in the sample test case provided below. Steps to Reproduce 1. Setup field-specific ACLs for a choice field "Problem" table in OOB Quebec and OOB Paris 2. Create the following ACLs: - One ACL for problem.field/write which the ITIL user passes (assigned itil role) - One ACL for problem.field/write which the ITIL user fails (assigned roles such as problem_manager, incident_manager etc. but with condition that itil user fails) - One ACL for problem.field/list_edit which the ITIL user fails (assigned admin role like in an example case) 3. Impersonate ITIL User 4. Go to Problem->Open/ All in list view 5. Double-click the specific choice field taken into consideration to edit the field The ITIL user is not able to edit the field in the "Problem" list view in Paris ("Security prevents writing to this field"), but able to perform the operation in Quebec using the drop-down.
This problem is under review and targeted to be fixed in a future release. To receive notifications when more information becomes available, subscribe to this Known Error article by clicking the Subscribe button at the top right of this form. This issue occurs if a user cannot list edit Category, but they can list edit the dependent field Subcategory. One workaround would be to create a similar restrictive List Edit ACL on the dependent choice list field like the ACL on the parent field.
PRB1505205
Click on a version to see all relevant bugs
ServiceNow Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.