Integrating and managing application data →mediumMultiple ChoiceObjective-mapped

SNOW-CAD Integrating and managing application data Practice Question

Exhibit

{
  "name": "incident",
  "operation": "read",
  "script": "gs.hasRole('admin')",
  "type": "record"
}

Refer to the exhibit. An inbound REST call (GET) to the 'incident' table is returning a 403 error. The ACL shown in the exhibit is the only ACL on the table. The calling user has the 'incident_manager' role. What is the likely cause of the 403 error?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The ACL requires the 'admin' role, but the user has 'incident_manager'.

The ACL script explicitly requires the 'admin' role. Since the user has 'incident_manager' but not 'admin', the ACL denies access, resulting in a 403 Forbidden error.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The ACL script is malformed.
Why it's wrong here
The script syntax is valid.
✓
The ACL requires the 'admin' role, but the user has 'incident_manager'.
Why this is correct
Correct: The script checks for 'admin' role, so the user is denied.
✗
The ACL operation is 'read' but the REST call is a POST.
Why it's wrong here
The call is a GET, which matches the 'read' operation.
✗
The user does not have the 'rest_api' role.
Why it's wrong here
The 'rest_api' role is not required for the ACL; it's about the user's roles.

Visual reference

Go deeper

SNOW-CAD Integrating and managing application data Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question