---
title: Contextual Security Plugin Disabled
description: "Impact Area Security Severity High Affected Element Inactive security plugin ## Rule ID **SN-0035** ## Impact The Contextual Security plugin should be enabled. ## Remediation This Contextual Security plugin enables contextual security to secure a record/information using create, read, write,…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/servicenow-rules/contextual-security-plugin-disabled/"
updated: "2025-03-21"
category: Rules
---

# Contextual Security Plugin Disabled

Impact Area       Security           Severity

High

           Affected Element

Inactive security plugin

## Rule ID

**SN-0035**

## Impact

The Contextual Security plugin should be enabled.

## Remediation

This Contextual Security plugin enables contextual security to secure a record/information using create, read, write, and delete functionality. It secures the data with the help of ACL rules instead of traditional, role-based dictionary rules implemented by simple security manager. After this is installed, the dictionary roles (created by simple security manager) are no longer tested. Instead, the system looks for ACL rules on fields and tables. Even if you configure the dictionary form and add roles to a dictionary entry, no change in rights occurs.

### Time to fix

5 min

## References

This rule is linked to [Common Weakness Enumeration CWE-284 Improper Access Control](https://cwe.mitre.org/data/definitions/284.html).