CSA · Question #162
What is the result of the order in which access controls are evaluated?
The correct answer is D. Ensures user has access to a table, before evaluating access to a field in the table. Access controls are evaluated from the most general to the most specific, ensuring a user has access to the overall table before specific fields within it.
Question
What is the result of the order in which access controls are evaluated?
Options
- AEnsures user has access to the fields in a table, before considering their access to the table
- BEnsures user can get to work as quickly as possible
- CEnsures user has access to the application, before evaluating access to a module within the
- DEnsures user has access to a table, before evaluating access to a field in the table
How the community answered
(46 responses)- A7% (3)
- B2% (1)
- C2% (1)
- D89% (41)
Why each option
Access controls are evaluated from the most general to the most specific, ensuring a user has access to the overall table before specific fields within it.
This is incorrect because access to fields is considered *after* access to the table, not before.
While efficient security contributes to productivity, this choice doesn't describe the technical mechanism of access control evaluation order.
Access control evaluation primarily focuses on records and fields, not the application and module hierarchy in this specific context.
ServiceNow's access control evaluation order follows a hierarchy: first at the table level (ACLs for <table>.*), then at the field level (ACLs for <table>.<field>). This ensures that if a user is denied access to the table entirely, there is no need to evaluate field-level access, optimizing performance and enforcing security efficiently.
Concept tested: Access control evaluation order
Source: https://docs.servicenow.com/bundle/utah-platform-security/page/administer/contextual-security/concept/c_ACLRulesEvaluationOrder.html
Topics
Community Discussion
No community discussion yet for this question.