acl-security
Installation
SKILL.md
ACL Security Patterns for ServiceNow
Access Control Lists (ACLs) are the foundation of ServiceNow security. They control who can read, write, create, and delete records.
Which ACLs can apply
An ACL applies by name, and the name is literal — sys_security_acl.name holds incident.priority or *, never a glob pattern. For one field on a table that extends another, six names can each carry a rule:
| Name | Carries the rule for |
|---|---|
incident.priority |
this field on this table |
task.priority |
this field on a parent table |
*.priority |
a field of this name on any table |
incident.* |
any field on this table |
task.* |
any field on a parent table |
*.* |
any field on any table |
Alongside them are the record-level names: incident, then each parent table in the sys_db_object.super_class chain, then *.