Skip to page contentSkip to chat
ServiceNow support
    • Community
      Ask questions, give advice, and connect with fellow ServiceNow professionals.
      Developer
      Build, test, and deploy applications
      Documentation
      Find detailed information about ServiceNow products, apps, features, and releases.
      Impact
      Accelerate ROI and amplify your expertise.
      Learning
      Build skills with instructor-led and online training.
      Partner
      Grow your business with promotions, news, and marketing tools
      ServiceNow
      Learn about ServiceNow products & solutions.
      Store
      Download certified apps and integrations that complement ServiceNow.
      Support
      Manage your instances, access self-help, and get technical support.
New Time Card ACL prevents timecard_user Users from editing their own Time cards - Support and Troubleshooting
  • >
  • Knowledge Base
  • >
  • Support and Troubleshooting (Knowledge Base)
  • >
  • New Time Card ACL prevents timecard_user Users from editing their own Time cards
KB0830749

New Time Card ACL prevents timecard_user Users from editing their own Time cards


332 Views Last updated : Sep 4, 2023 public Copy Permalink
KB Summary by Now Assist

Issue

In Orlando, a new ACL was introduced for time_card.* WRITE. This ACL limits or allows users to write to ALL fields on the time_card table, based on a script condition that checks the TimeCardUtil script include. In the New York version, there is a singular WRITE ACL on the time_card table. The new ACL in Orlando basically takes the script from the New York table ACL and applies that script to all fields.

Below are the ACLS existing for WRITE on time_card (for table/field level)

New York
>> time_card | Write (table)
-- Role Conditions: timecard_user
-- Script: TimeCardUtil.canEdit(current)

Orlando
>> time_card | Write (table)
-- Role Conditions: timecard_user

>> time_card.* | Write (field level)
-- Role Conditions: snc_internal
-- Script: TimeCardUtil.canEdit(current)

Release

Orlando+

Cause

If any modifications were made to the TimeCardUtil Script Include, specifically the OOB function 'canEdit', this will affect Users who are being evaluated for the time_card.* WRITE ACL as it checks TimeCardUtil.canEdit(current). If the canEdit function is removed, then NO only admins would have the ability to edit time_card fields.

 

TimeCardUtil.canEdit(current) checks for:

a) User is a timecard_admin
b) User who accesses their own time card (or they are the manager of that user)
c) User is Admin

Resolution

  1. Inspect your TimeCardUtil Script Include and ensure it is OOB (or at least that the TimeCardUtil.canEdit function is NOT modified)
  2. Ensure that time_card (WRITE) ACL and your time_card.* (WRITE) ACL is OOB

*Naturally, we advise that Script Includes remain OOB, especially those that influence or evaluate for system ACLs


The world works with ServiceNow.

Sign in for more! There's more content available only to authenticated users Sign in for more!
Did this KB article help you?
Did this KB article help you?

Attachments

Attachments

No attachments found

How would you rate your Now Support digital experience?

*

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

What can we improve? Please select all that apply.

What are we doing well? Please select all that apply.

Tell us more

*

Do you expect a response from this feedback?

  • Terms and conditions
  • Privacy statement
  • GDPR
  • Cookie policy
  • © 2025 ServiceNow. All rights reserved.