ACL fail due to EvaluatorException when two dynamic conditions used with a emtpy group list - Known Error

ACL fail due to EvaluatorException when two dynamic conditions used with a emtpy group list Description Creating a dynamic ACL using a list type field and another dynamic conditions. In this specific instance a group list is used in where the group list is empty and the User being evaluated does not have any group lists assigned to him. Due to this, when the ACL evaluates, it fails which does not give the user write rights on the record.

Steps to Reproduce

1.Using OTB instance 2. Disable all OTB write ACL's on incident 3. Create a new acl: Operation: Write Name Incident Role: itil Condition: "Assigned to" - is (dynamic) - Me OR "Group list" - is (dynamic) - One of My Groups Save NOTE: The user should get write access when the logged in user is the one assigned to the incident or if ITIL belongs to one of the groups

4. Go to incident.list and open a record 5. Right click on the header and click Configure -> Form layout and Add "Group list" onto the right side and save 6. On that record, make the ITIL User as the "Assigned to" user and save the changes. 7. Go to sys_user.list and find itil user 8. Click on the Groups tab and remove any group the users belongs to 9. Impersonate ITIL User 10. Go to incident_list.do and open the same record as was opened in step 4. (where "Assigned to" = ITIL User)

Notice that the user cannot see the record even though they should

Keep in mind both "Group list" is empty on the Incident record and the ITIL User's group list is empty as well.

Workaround This behavior of empty lists in a dynamic filter is as designed. The presence of the empty list causes the entire condition to fail, even if it was constructed as an OR with another predicate that would have succeeded. This behavior may be altered by setting the property com.glide.script.jsgenerator.cancel_condition_on_empty_dynamic_filter = false With this property setting, the empty list predicate evaluates as false, but the remainder of the condition is permitted to be evaluated.