ACL will block glidefilter in listcollector - Known Error

ACL will block glidefilter in listcollector Description ACL will block glidefilter in listcollector.

Steps to Reproduce

1. Create a new Test table with one column name:private type:string 2. Create a read ACL for private column set role to be admin. 3. Create a new record for this table, set private field to be "abcabc" 4. Go to service catalog > catalog definition > order guides create a new order guide with following setup name: testfilter catalog: Service Catalog Category: Software Save it. 5 In this order guide, go to the variable related list and click on new Type: List Collector Under Question section: Question: TestFilterQ Name: TestFilterQ Under Type Specific section: List Table: Test (the one we create in step 1) Update the varibable 6 Still in this order guide page. Right click on header, select Configure -> Related List In the open window Select "Catalog Client Script->Catalog Item" and save it. 7. Still in order guide, we should see catalog client script section. Create a new one: Type: onLoad Script: function onLoad() { //Apply a default filter to the list collector variable var collectorName = 'TestFilterQ'; var filterString = 'private=abcabc';

//Hide the list collector until we've set the filter g_form.setDisplay(collectorName, false); setCollectorFilter();

function setCollectorFilter(){ //Test if the g_filter property is defined on our list collector. //If it hasn't rendered yet, wait 100ms and try again. if (eval('typeof(' + collectorName + 'g_filter)') == 'undefined' ) { setTimeout(setCollectorFilter, 100); return; } //Find the filter elements var fil = gel('ep'); //Hide the filter elements by un-commenting the following lines /*fil.rows[0].style.display = 'none'; fil.rows[1].style.display = 'none'; fil.nextSibling.rows[0].style.display = 'none'; //Filter description text*/

//Reset the filter query eval(collectorName + 'g_filter.reset()'); eval(collectorName + 'g_filter.setQuery("' + filterString + '")'); eval(collectorName + 'acRequest(null)'); //Redisplay the list collector variable g_form.setDisplay(collectorName, true); } } 8 Impersonate an employee user, go to service catalog -> software -> testfilter and we can see that the filter condition is Keywords are abcabc instead of private is abcabc because they can't get access to private column. As a result, some user would see the unexpected result.

Workaround This is expected behaviour. Make sure the field of glidefilter added to list collector is matching the ACL setup on the column.