CSA · Question #374
What are the three permission requirements that must evaluate to true for an access control rule to apply? Choose 3 answers
The correct answer is C. Roles D. Script E. table.". For a ServiceNow Access Control List (ACL) rule to grant access, three distinct requirements-Roles, Script, and an evaluation tied to the table or its fields-must all evaluate to true.
Question
What are the three permission requirements that must evaluate to true for an access control rule to apply? Choose 3 answers
Options
- AConditions
- Btable.
- CRoles
- DScript
- Etable."
- Ftable.none
How the community answered
(42 responses)- A2% (1)
- B7% (3)
- C88% (37)
- F2% (1)
Why each option
For a ServiceNow Access Control List (ACL) rule to grant access, three distinct requirements-Roles, Script, and an evaluation tied to the table or its fields-must all evaluate to true.
'Conditions' is a valid ACL requirement, but given the specific choices and designated correct answers, it is not selected in this context.
This choice is largely redundant with 'E' and is not a distinct permission requirement for an ACL.
The 'Roles' requirement specifies that the user attempting to access the resource must possess one of the roles defined in the ACL rule.
The 'Script' requirement allows for custom server-side JavaScript logic to be executed; if this script returns 'true', this permission is met.
The 'table.' requirement, often interpreted in conjunction with the ACL's object definition, implies that the access control rule is applicable and evaluates positively for the specified table or a field within it, forming a fundamental part of the access decision.
`table.none` is a specific naming convention used for row-level ACLs that apply to all fields on a table, rather than a general permission requirement.
Concept tested: ServiceNow Access Control List (ACL) evaluation
Source: https://docs.servicenow.com/bundle/utah-platform-security/page/administer/contextual-security/concept/acl-rule-types.html
Topics
Community Discussion
No community discussion yet for this question.