You can actually look in the eBook provided for the CSA Exam at page 429.
It says that at Table Level: Most specific to most general, Field Level: Most specific to most general.
It's C.
Page 319 in Utah SNAF eBook near the bottom of the page.
Also throws A out the door right off bat by saying "Specific to General" is how ACLs are evaluated.
I think SN switched from "general-to-specific" to "specific-to-general" somewhere between San Diego and Tokyo.
In San Diego:
This processing order ensures that users gain access to more general objects before gaining access to more specific objects. A user must pass both table and field ACL rules to access a record object.
In Tokyo:
This processing order ensures that users gain access to more specific objects before gaining access to more general objects. A user must pass both table and field ACL rules to access a record object.
In my "Additional ServiceNow Fundamentals Content for System Administrators and Developers course" (San Diego edition), it says:
When a session requests data, the system looks for matching access control rules.
Record ACL rules are processed in the following order:
1. Match the object against table ACL rules - most specific to most general.
2. Match the object against field ACL rules - most specific to most general.
The correct statement is A. Table access rules are evaluated from the general to the specific.
In ServiceNow, the evaluation of Access Control rules follows a general-to-specific order. This means that the more general rules are evaluated first, followed by more specific rules. The system checks the access control rules for a table, starting with the global (most general) rules, and then proceeds to evaluate table-specific and field-specific rules.
Answer is A
In ServiceNow, if both a row-level rule and a field-level rule exist, both rules do not need to be true for an operation to be allowed. The rules are evaluated independently, and if either the row-level rule or the field-level rule allows the operation, it will be permitted.
A is correct.
option C describes a specific case, it does not capture the general rule for all access control rule evaluations in ServiceNow. Option A, which states that table access rules are evaluated from the general to the specific, is a more universally applicable statement.
I want to say A, but, if you think about a single field on a table, the rules are evaluated: specific to general.
incident.description is evaluated before incident.*
Since A is wrong, it must be C.
And to respond to Bubu770, who asked about "row", perhaps a table might contain 10 entries (rows) and after evaluating rules on each row, you might be able to see 6 of the rows.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Jorr
Highly Voted 1 year, 10 months agoTimmyLam
Most Recent 6 months, 3 weeks agoba14741
8 months agoMihaf92
1 year, 1 month ago[Removed]
1 year, 1 month ago[Removed]
1 year, 2 months agocluelessdood
1 year, 2 months agoDekoreh
1 year, 3 months agoShimdog
1 year, 4 months agoMax191
1 year, 4 months agoSunnyNik
1 year, 4 months agoSunnyNik
1 year, 4 months agoHimanPatel
1 year, 4 months agoSpiderman5000
1 year, 10 months agoandycsa
1 year, 10 months agoandycsa
1 year, 10 months agotipsybroom
1 year, 10 months ago