GlideSecurityManager- Global

The GlideSecurityManager API provides methods that enable you to retrieve a SecurityManager object and to check if the current user has access rights, both table-level and field-level, to a specified GlideRecord table based on the configured Access Control Rules (ACLs).

Parent Topic:Server API reference

GlideSecurityManager - get()

Returns a SecurityManager object.

Name Type Description None     Type Description Object SecurityManager object.

The following code example shows how to call the GlideSecurityManager.get() method to obtain a GlideSecurityManager object that is then used by the GlideSecurityManager.hasRightsTo() method.

var sm = GlideSecurityManager.get();
var grInc = new GlideRecord('incident');
var path = 'record/incident/read';

gs.info(sm.hasRightsTo(path, grInc));

Output:

true

GlideSecurityManager - hasRightsTo(String path_to_resource, Object context)

Indicates whether the current user has table-level access rights to a specified GlideRecord table based on the configured Access Control Rules (ACLs). This method evaluates all available ACLs for the specific resource.

For additional information on ACLs, see Access Controls Evaluation Order.

<table id=“table_mvc_jxd_d2c” class=“parameters”><thead><tr><th>

Name

</th><th>

Type

</th><th>

Description

</th></tr></thead><tbody><tr><td>

path_to_resource

</td><td>

String

</td><td>

Resource path to the GlideRecord table to check for access rights.For example: record/incident/read

Format: <type>/<name>/<operation>

• <type>: Type of resource. Valid values: Existing ACL types. Available from the drop-down choice list on the ACL form.

• <name>: Name of the table to check.

• <operation>: Name of the operation that you want to check access rights for. In this case “read”.

</td></tr><tr><td>

context

</td><td>

Object

</td><td>

Optional. For table-level validation this field is not required.

</td></tr></tbody> </table><table id=“table_nvc_jxd_d2c” class=“returns”><thead><tr><th>

Type

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Boolean

</td><td>

Flag that indicates whether the user’s roles permit table-level reading of the specified table.Valid values:

• true: Specified access is permitted.

• false: Specified access isn’t permitted.

</td></tr></tbody> </table>The following code example shows how to use the hasRightsTo() method to check if the current user has table-level read rights to all records in the Incident [incident] table.

var sm = GlideSecurityManager.get();
var grInc = new GlideRecord('incident');
var path = 'record/incident/read';

gs.info(sm.hasRightsTo(path, grInc));

Output:

false