Re:ServiceNow Insecure Access Control to Full Admin Takeover
by NikolaNovak on Friday July 07, 2023 @06:32PM
(#36639126)
My background is ERP so that sounds similar then - the bones may be decent, but how you implement it can make or break it, both as IT exercise and as business transformation / process implementation; is that About right?
I will likely have some input on how it's implemented and particularly the processes. I guess I should start reading up on best practices etc...
Re:ServiceNow Insecure Access Control to Full Admin Takeover
by Karrot_Kream on Friday July 07, 2023 @07:22PM
(#36639579)
This seems to be the big problem with ERPs. Problem domains are complex so you need implementation flexibility, but with that comes the ability to create shitty systems that everyone hates.
Re:ServiceNow Insecure Access Control to Full Admin Takeover
by vxNsr on Saturday July 08, 2023 @10:59PM
(#36651069)
Yes, servicenow is much closer to an opinionated ERP vs a simple ITSM platform. In fact they’re working pretty hard on making it easier to implement your own erp type process in snow, instead of using it for only your item needs.
Re:ServiceNow Insecure Access Control to Full Admin Takeover
by notyourwork on Friday July 07, 2023 @07:48PM
(#36639775)
100% this - I used to do enterprise integrations in the early days of ServiceNow. It's not a bad platform, consulting companies can suck (most do) and in-house implementations usually suck for different reasons.
ServiceNow is a combination of data modeling, interface and process design along with carefully balancing how to do things. Most of my time was in the CMS and SOAP integrations.
A very well architected instance looks and is pretty good, the issue is that often large enterprises will hire the cheapest possible consulting firm to implement it, and you can really screw it up if you’re not careful.