Madrid onwards: snc_external users are unable to login to the Classic and Agent Mobile Apps.


Users with snc_external roles are unable to login to Mobile apps in Madrid, this is affecting the Classic and Agent apps.

Steps to Reproduce

Pre-req: make sure that the following plugin is active: Explicit Roles [com.glide.explicit_roles}

1. Go to sys_user record of "abel.tuter"
2. Assign the user the only role: snc_external
3. Set a password for the user
4. Open Classic or Agent mobile app
4. Add instance and try to login.

Observed behaviour: the user is not logged in and the node log has the following error:
10/11/19 13:15:20 (912) SYSTEM Session created: D0C7FFEBDB14841029E5AE661B961919, timeout after 30 minutes of inactivity
10/11/19 13:15:20 (913) SYSTEM New transaction D0C7FFEBDB14841029E5AE661B961919 #176924 /api/now/mobile/app_bootstrap/post_auth
10/11/19 13:15:20 (927) SYSTEM HTTP authorization validated user 'abel.tuter'
10/11/19 13:15:20 (927) SYSTEM Session user set to abel.tuter
10/11/19 13:15:20 (954) D0C7FFEBDB14841029E5AE661B961919 #176924 [REST API] RESTAPIProcessor : External User Not Authorized
10/11/19 13:15:20 (954) D0C7FFEBDB14841029E5AE661B961919 *** End #176924 /api/now/mobile/app_bootstrap/post_auth, user: abel.tuter, total time: 0:00:00.000, processing time: 0:00:00.000, SQL time: 0:00:00.018 (count: 25), ACL time: 0:00:00.001, source: , type:rest, method:null, api_name:null, resource:null, version:null, user_id:62826bf03710200044e0bfc8bcbe5df1, response_status:403


There is no workaround currently available.

Related Problem: PRB1368237