Core Application Development →hardMultiple ChoiceObjective-mapped

SNOW-CAD Core Application Development Practice Question

Exhibit

Refer to the exhibit.

Exhibit (ACL condition script):
```javascript
(function evaluateRule() {
    if (gs.getUser().getCompany() == gs.getProperty('my_company.sys_id')) {
        var mgr = gs.getUser().getManagerID();
        if (mgr != '' && current.assigned_to == mgr) {
            return true;
        }
    }
    return false;
})();
```

This ACL is configured to control read access on the 'incident' table. Under what condition will a user be allowed to read an incident record?

⚠ Common exam trap

Candidates often confuse the direction of the manager relationship, assuming the incident must be assigned to the user's manager rather than the user themselves, or they incorrectly apply the company check to the manager instead of the user.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

If the user is from the company specified and the incident is assigned to the user's manager.

The ACL condition checks that the user's company matches the company specified in the property, and the incident record's assigned_to field equals the user's manager. This is a common pattern in ServiceNow where read access is granted based on a relationship (manager) rather than direct assignment, ensuring that managers can view incidents assigned to their direct reports.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
If the user is from the company specified, regardless of the assigned_to field.
Why it's wrong here
The second condition (assigned_to == manager) must also be true.
✗
If the user is from the company specified in the property and the incident is assigned to the user.
Why it's wrong here
The check is 'current.assigned_to == mgr', where mgr is the user's manager, not the user themselves.
✓
If the user is from the company specified and the incident is assigned to the user's manager.
Why this is correct
Both conditions: user's company matches property, and incident assigned to user's manager.
✗
If the user's manager is from the company specified and the incident is assigned to the user.
Why it's wrong here
The user must be from the company, not the manager.

Visual reference

Go deeper

SNOW-CAD Core Application Development Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question