<h2>Users with no roles submitted the catalog items</h2><br/><div style="overflow-x:auto"><article><div ><h3 >Issue </h3><section><ul style="list-style-type: square; list-style-position: inside;"><li>Users with no roles submitted the catalog items.</li></ul></section></div><div ><h3 >Release</h3><section><ul style="list-style-type: square; list-style-position: inside;"><li>All releases.</li></ul></section></div><div ><h3 >Cause</h3><section><ul style="list-style-type: square; list-style-position: inside;"><li>There are no user criteria applied to items, therefore, any users could access the items. Furthermore, no ACLs either.</li><li>The node logs clearly show that the user ordered the item through the Service Portal.</li><li>Ex, 07:38:11.980 Info Default-thread-6 5613BB54DB7D28509A3227E3CA961946 txid=5cb47f98db3d *** Start #1133633 /api/now/sp/rectangle/e2656985ff630200ba13ffffffffff68, user: xxxx</li><li>07:38:12.090 Info API_INT-thread-2 5613BB54DB7D28509A3227E3CA961946 txid=9cb4ffd0db3d *** Start #1133634 /api/sn_sc/v1/servicecatalog/items/d00b1e1adb8cdb00a69cf0c6ae96194b/order_now, user: xxxxx</li></ul></section></div><div ><h3 >Resolution</h3><section><ul style="list-style-type: square; list-style-position: inside;"><li>Apply user criteria/ACL to the items.</li></ul></section></div></article></div>