CMDB Identification and Reconciliation deny_unless ACLs not deactivated on upgrade for packages outside com.snc.cmdb in Zurich upgrade - Known Error

CMDB Identification and Reconciliation deny_unless ACLs not deactivated on upgrade for packages outside com.snc.cmdb in Zurich upgrade Description During an upgrade from Yokohama to Zurich, deny_unless ACLs that were added by the com.snc.cmdb application remain active for tables belonging to other packages. The fix script that should deactivate these ACLs runs only from the com.snc.cmdb package, and a package‑validation check prevents it from affecting ACLs outside that package. As a result, 198 deny_unless ACLs are not deactivated, potentially causing security‑related access issues after the upgrade.

Steps to Reproduce

1. Install the com.snc.cmdb.enterprise plugin on a Yokohama instance. 2. Upgrade the instance to the Zurich release. 3. Navigate to the ACL list (e.g., https:// .service-now.com/now/nav/ui/classic/params/target/sys_security_acl_list.do?sysparm_tiny=hADnbAupcTgmRdNO6uxOOCh1EnhQdJ0G) and verify that deny_unless ACLs for packages other than com.snc.cmdb are still active.

Workaround Call the following script via a background script to inactivate the records that we NOT deactivated. var gr = new GlideRecord("sys_security_acl"); gr.addEncodedQuery("sys_idINe4089b67b7a422109da93693ce11a920,e4089b67b7a422109da93693ce11a924,e8089f67b7a422109da93693ce11a9b8,11b8f227b76422109da93693ce11a9d0,15b8f227b76422109da93693ce11a9dc,45b8f227b76422109da93693ce11a9ba,49b8f227b76422109da93693ce11a9c0,4db8f227b76422109da93693ce11a9c6,51b8f227b76422109da93693ce11a9d3,55b8f227b76422109da93693ce11a9df,89b87227b76422109da93693ce11a96c,8db8f227b76422109da93693ce11a9c9,91b8f227b76422109da93693ce11a9d6,95b8f227b76422109da93693ce11a9e2,c5b8f227b76422109da93693ce11a9bd,c9b8f227b76422109da93693ce11a9c3,d1b8f227b76422109da93693ce11a9d9,ddb8f227b76422109da93693ce11a9cc,0d33c3ebb76022109da93693ce11a989,0d33c3ebb76022109da93693ce11a98c,0d33c3ebb76022109da93693ce11a98f,0d33c3ebb76022109da93693ce11a992,0d33c3ebb76022109da93693ce11a995,0d33c3ebb76022109da93693ce11a998,0d33c3ebb76022109da93693ce11a99b,0d33c3ebb76022109da93693ce11a99e,0d33c3ebb76022109da93693ce11a9a1,0d33c3ebb76022109da93693ce11a9a4,193307ebb76022109da93693ce11a963,193307ebb76022109da93693ce11a966,193307ebb76022109da93693ce11a969,193307ebb76022109da93693ce11a96c,213307ebb76022109da93693ce11a9c6,2d3307ebb76022109da93693ce11a9cc,303383ebb76022109da93693ce11a940,313347ebb76022109da93693ce11a976,313347ebb76022109da93693ce11a979,313347ebb76022109da93693ce11a97c,313347ebb76022109da93693ce11a97f,313347ebb76022109da93693ce11a982,313347ebb76022109da93693ce11a985,313347ebb76022109da93693ce11a988,313347ebb76022109da93693ce11a98b,313347ebb76022109da93693ce11a98e,313347ebb76022109da93693ce11a991,313347ebb76022109da93693ce11a994,313347ebb76022109da93693ce11a997,493383ebb76022109da93693ce11a946,513307ebb76022109da93693ce11a94b,513307ebb76022109da93693ce11a94e,513307ebb76022109da93693ce11a951,513307ebb76022109da93693ce11a954,5d3307ebb76022109da93693ce11a9a0,5d3307ebb76022109da93693ce11a9a3,5d3307ebb76022109da93693ce11a9a6,5d3307ebb76022109da93693ce11a9a9,693307ebb76022109da93693ce11a9df,693307ebb76022109da93693ce11a9e2,693307ebb76022109da93693ce11a9e5,693307ebb76022109da93693ce11a9e8,693307ebb76022109da93693ce11a9eb,693307ebb76022109da93693ce11a9ee,693307ebb76022109da93693ce11a9f1,693307ebb76022109da93693ce11a9f4,693307ebb76022109da93693ce11a9f7,693307ebb76022109da93693ce11a9fa,693307ebb76022109da93693ce11a9fd,693347ebb76022109da93693ce11a900,693347ebb76022109da93693ce11a903,693347ebb76022109da93693ce11a906,693347ebb76022109da93693ce11a909,693347ebb76022109da93693ce11a90c,693347ebb76022109da93693ce11a90f,693347ebb76022109da93693ce11a912,693347ebb76022109da93693ce11a915,693347ebb76022109da93693ce11a918,693347ebb76022109da93693ce11a91b,693347ebb76022109da93693ce11a91e,693347ebb76022109da93693ce11a921,693347ebb76022109da93693ce11a924,693347ebb76022109da93693ce11a927,693347ebb76022109da93693ce11a92a,693347ebb76022109da93693ce11a92d,693347ebb76022109da93693ce11a930,693347ebb76022109da93693ce11a933,693347ebb76022109da93693ce11a936,693347ebb76022109da93693ce11a939,693347ebb76022109da93693ce11a93c,693347ebb76022109da93693ce11a93f,693347ebb76022109da93693ce11a942,693347ebb76022109da93693ce11a945,693347ebb76022109da93693ce11a948,693347ebb76022109da93693ce11a94b,693347ebb76022109da93693ce11a94e,693347ebb76022109da93693ce11a951,693347ebb76022109da93693ce11a954,693347ebb76022109da93693ce11a957,693347ebb76022109da93693ce11a95a,693347ebb76022109da93693ce11a95d,693347ebb76022109da93693ce11a960,693347ebb76022109da93693ce11a963,6d3307ebb76022109da93693ce11a9ac,6d3307ebb76022109da93693ce11a9af,6d3307ebb76022109da93693ce11a9b2,793347ebb76022109da93693ce11a966,893383ebb76022109da93693ce11a949,8933c3ebb76022109da93693ce11a983,8e3387ebb76022109da93693ce11a909,8e3387ebb76022109da93693ce11a90c,8e3387ebb76022109da93693ce11a90f,8e3387ebb76022109da93693ce11a912,8e3387ebb76022109da93693ce11a915,8e3387ebb76022109da93693ce11a918,8e3387ebb76022109da93693ce11a91b,a13307ebb76022109da93693ce11a9d0,a53307ebb76022109da93693ce11a9c9,c133c3ebb76022109da93693ce11a9b4,c133c3ebb76022109da93693ce11a9b7,c133c3ebb76022109da93693ce11a9ba,c133c3ebb76022109da93693ce11a9bd,c133c3ebb76022109da93693ce11a9c0,c133c3ebb76022109da93693ce11a9c3,c133c3ebb76022109da93693ce11a9c6,c133c3ebb76022109da93693ce11a9c9,c133c3ebb76022109da93693ce11a9cc,c133c3ebb76022109da93693ce11a9cf,c133c3ebb76022109da93693ce11a9d2,c133c3ebb76022109da93693ce11a9d5,c133c3ebb76022109da93693ce11a9d8,c133c3ebb76022109da93693ce11a9db,c133c3ebb76022109da93693ce11a9de,c133c3ebb76022109da93693ce11a9e1,c133c3ebb76022109da93693ce11a9e4,c133c3ebb76022109da93693ce11a9e7,c133c3ebb76022109da93693ce11a9ea,c133c3ebb76022109da93693ce11a9ed,c63347ebb76022109da93693ce11a9d0,c63347ebb76022109da93693ce11a9d3,c63347ebb76022109da93693ce11a9d6,c63347ebb76022109da93693ce11a9d9,c63347ebb76022109da93693ce11a9dc,c63347ebb76022109da93693ce11a9df,c63347ebb76022109da93693ce11a9e2,c63347ebb76022109da93693ce11a9e5,c63347ebb76022109da93693ce11a9e8,c63347ebb76022109da93693ce11a9eb,c63347ebb76022109da93693ce11a9ee,c63347ebb76022109da93693ce11a9f1,c63347ebb76022109da93693ce11a9f4,c63347ebb76022109da93693ce11a9f7,c63347ebb76022109da93693ce11a9fa,c933c3ebb76022109da93693ce11a986,d13307ebb76022109da93693ce11a902,d13307ebb76022109da93693ce11a905,d13307ebb76022109da93693ce11a908,d13307ebb76022109da93693ce11a90b,d13307ebb76022109da93693ce11a90e,d13307ebb76022109da93693ce11a911,d13307ebb76022109da93693ce11a914,d13307ebb76022109da93693ce11a917,d13307ebb76022109da93693ce11a91a,d13307ebb76022109da93693ce11a91d,d13307ebb76022109da93693ce11a920,d13307ebb76022109da93693ce11a923,d13307ebb76022109da93693ce11a926,d13307ebb76022109da93693ce11a929,d13307ebb76022109da93693ce11a92c,d13307ebb76022109da93693ce11a92f,d133c3ebb76022109da93693ce11a9f0,d133c3ebb76022109da93693ce11a9f3,d133c3ebb76022109da93693ce11a9f6,d133c3ebb76022109da93693ce11a9f9,d133c3ebb76022109da93693ce11a9fc,d133c3ebb76022109da93693ce11a9ff,dd3307ebb76022109da93693ce11a97b,dd3307ebb76022109da93693ce11a97e,dd3307ebb76022109da93693ce11a981,dd3307ebb76022109da93693ce11a984,e13307ebb76022109da93693ce11a9b6,f53347ebb76022109da93693ce11a9a6,f53347ebb76022109da93693ce11a9a9,f53347ebb76022109da93693ce11a9ac,f53347ebb76022109da93693ce11a9af,f53347ebb76022109da93693ce11a9b2,f53347ebb76022109da93693ce11a9b5,f53347ebb76022109da93693ce11a9b8,f53347ebb76022109da93693ce11a9bb,f53347ebb76022109da93693ce11a9be,f53347ebb76022109da93693ce11a9c1,f53347ebb76022109da93693ce11a9c4,f53347ebb76022109da93693ce11a9c7,f53347ebb76022109da93693ce11a9ca,f53347ebb76022109da93693ce11a9cd,11e70723b7e022109da93693ce11a924,19e70723b7e022109da93693ce11a920,1de7cf23b7e022109da93693ce11a902,99e78f23b7e022109da93693ce11a9fc,d9e78f23b7e022109da93693ce11a9ff"); gr.query(); gr.active = false; gr.updateMultiple(); Related Problem: PRB2015612