Loading...
Loading...
After activating the plugins/apps without changing anything security access restriction errors are shown as below. Seen in Rome Patch 0 / Employee Center Pro 21.0.2 As well as Rome Patch 1 / Employee Center Pro 22.0.7 Errors: ----- ErrorRead operation on table 'sn_ja_task' from scope 'Employee Center' was denied. The application 'Employee Center' must declare a cross scope access privilege. Please contact the application admin to update their access requests. Errorcom.glide.script.fencing.access.ScopeAccessNotGrantedException: read access to sn_ja_task not granted ErrorScript source code logged to console ErrorFailing widget: 'Employee Center Header' (d0009941eb103010ed7966d6475228c1) ErrorRead operation on table 'sn_hr_core_case' from scope 'Employee Center' was denied. The application 'Employee Center' must declare a cross scope access privilege. Please contact the application admin to update their access requests. ErrorRead operation on table 'sn_ja_task' from scope 'Employee Center Pro' was denied. The application 'Employee Center Pro' must declare a cross scope access privilege. Please contact the application admin to update their access requests. ----- ErrorRead operation on table 'sn_doc_task' from scope 'Employee Center' was denied. The application 'Employee Center' must declare a cross scope access privilege. Please contact the application admin to update their access requests. Errorcom.glide.script.fencing.access.ScopeAccessNotGrantedException: read access to sn_doc_task not granted ErrorScript source code logged to console ErrorFailing widget: 'Employee Center Header' (d0009941eb103010ed7966d6475228c1) ErrorRead operation on table 'sn_hr_core_case' from scope 'Employee Center' was denied. The application 'Employee Center' must declare a cross scope access privilege. Please contact the application admin to update their access requests. ErrorRead operation on table 'sn_doc_task' from scope 'Employee Center Pro' was denied. The application 'Employee Center Pro' must declare a cross scope access privilege. Please contact the application admin to update their access requests. ----
After installing the updated Employee Center plugin and the Pro plugin, these errors are displayed until the customer admin grants access to get rid of these errors. 1. Log in to an affected instance 2. Navigate to the new portal: /esc ---> Errors displayed "Read operation on a particular resource has been denied. The application must declare a cross scope access privilege."
Whenever there is an error that matches the format, "Read operation on a particular resource has been denied. The application must declare a cross scope access privilege." This is because of an RCA that is in requested/invalidated state and needs to be accepted. Search for "Restricted Caller Access" (RCA in short) in navigation menu and look for RCAs in requested state. We use a requested RCA to grant store apps access to protected resources in the Now Platform without the need to wait for the next family release. If you have the system admin or application admin role, you can review requested RCAs and approve and deny them. RCAs are classified into three categories: Real RCA: System generated RCA during functional flow to access cross scope resources Requested RCA: RCA shipped by store app in source scope are called requested RCAs Generated RCA: During run time for app installation system generates RCAs in target application scope for all the Requested RCAs in requested state. These are called generated RCAs
PRB1526318
Click on a version to see all relevant bugs
ServiceNow Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.