Enable work order management query rules for service organizations
Use the sn_fsm.use_query_rules property to apply rules and filters to the Field Service Management tables.
When set to true, rules/filters from sn_query_rule table will be used to determine read access to Field Service Management-related tables (Work Order and Work Order Task) to the logged in user through query business rules and read ACLs. When false, the records won't be filtered based on query rules. Query business rules add additional security validations. Specifically, this property will filter records for agents, qualifiers, and dispatchers based on their assigned territory or territory membership. It is best practice to follow the principle of least privilege when reading records.
Set the sn_fsm.use_query_rules system property to true.
More information
| Attribute | Description |
|---|---|
| Configuration name | sn_fsm.use_query_rules |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | false |
| Category | Access control |
| Security risk | - Severity score: 4.3 - CVSS score: Medium - Security risk details: There may be increased risk of data exposure from Field Service Management tables. |
| Dependencies and prerequisites | None |
| Functional impact | When set to true, rules/filters from sn\_query\_rule table are used to determine read access to Field service management related tables. For example, Work Order \(WO\) and Work Order Table \(WOT\) to the logged-in user through query business rules and READ ACLs. When false, the records aren't filtered based on query rules. Enabling this property secures the data, and all data \(wm\_task and wm\_order\) won't be visible to their users. |
| References |
Parent Topic:Access control