An administrator is troubleshooting why conflict detection is not running when changes are updated via a REST API integration. Which condition in the conflict detection business rule might prevent execution during API calls?
Trap 1: Conflict detection requires an interactive web browser session
Business rules execute server-side on the Glide stack regardless of client, so a browser session is never a precondition for conflict detection during REST calls. It is tempting because interactive conflict detection does surface in the UI, and requiring a session would be the correct condition for client-side UI actions or form-based validation.
Trap 2: REST APIs inherently disable all database business rules globally
REST APIs invoke the same server-side business rule engine as the UI, so no global disabling occurs; rules run unless a condition, filter, or ACL blocks them. It is tempting because API calls do bypass UI policies and client scripts, which is the correct scenario for assuming certain logic will not fire.
Trap 3: Integration accounts lack read access to the cmdb_ci table
Conflict detection rules are skipped when the updating user is the integration account, because the rule's condition excludes the session user from triggering. Integration accounts lacking read access to cmdb_ci is a permissions issue, not a conflict-detection bypass. Read access matters for data retrieval, not rule execution.
- A
Conflict detection requires an interactive web browser session
Why it fails: Business rules execute server-side on the Glide stack regardless of client, so a browser session is never a precondition for conflict detection during REST calls. It is tempting because interactive conflict detection does surface in the UI, and requiring a session would be the correct condition for client-side UI actions or form-based validation.
- B
The business rule checks if the update modifies schedule-related fields (like planned start/end or CI) and runs accordingly
Conflict detection only fires when the update touches the schedule-related fields the rule inspects, so REST API changes altering other fields bypass it. This condition directly explains why detection does not run during those API calls.
- C
REST APIs inherently disable all database business rules globally
Why it fails: REST APIs invoke the same server-side business rule engine as the UI, so no global disabling occurs; rules run unless a condition, filter, or ACL blocks them. It is tempting because API calls do bypass UI policies and client scripts, which is the correct scenario for assuming certain logic will not fire.
- D
Integration accounts lack read access to the cmdb_ci table
Why it fails: Conflict detection rules are skipped when the updating user is the integration account, because the rule's condition excludes the session user from triggering. Integration accounts lacking read access to cmdb_ci is a permissions issue, not a conflict-detection bypass. Read access matters for data retrieval, not rule execution.