var ExplicitRolesEnabled = new GlidePluginManager().isActive('com.glide.explicit_roles');

// Only check if Explicit Roles is enabled
if (ExplicitRolesEnabled) {

    var counterBadInternalACLs = 0;
    var counterBadExternalACLs = 0;
    var sysIdSncInternal = '7fcaa702933002009c8579b4f47ffbde';
    var sysIdSncExternal = '940ba702933002009c8579b4f47ffbe2';
    var api = new SNC.RoleManagementAPI();

    var gr = new GlideRecord('sys_security_acl_role');
    gr.addQuery('sys_user_role', sysIdSncInternal);
    gr.query();
    while (gr.next()) {
        var aclSysId = gr.sys_security_acl;
        var gr2 = new GlideRecord('sys_security_acl_role');
        gr2.addQuery('sys_security_acl', aclSysId);
        gr2.addQuery('sys_user_role', '!=', sysIdSncInternal);
        gr2.addQuery('sys_user_role', '!=', sysIdSncExternal);
        gr2.query();

        while (gr2.next()) {
            // exclude the roles if that contain snc_external
            var role = gr2.sys_user_role;
            var containedRoles = api.findAllContainedRolesForRole(role);
            if (containedRoles.contains(sysIdSncExternal))
                continue;
            gs.print('Found an ACL with snc_internal and yet another role=' + role + '; ACL sys_id=' + aclSysId);
            counterBadInternalACLs++;
            break;
        }
    }

    var gr = new GlideRecord('sys_security_acl_role');
    gr.addQuery('sys_user_role', sysIdSncExternal);
    gr.query();
    while (gr.next()) {
        var aclSysId = gr.sys_security_acl;
        var gr2 = new GlideRecord('sys_security_acl_role');
        gr2.addQuery('sys_security_acl', aclSysId);
        gr2.addQuery('sys_user_role', '!=', sysIdSncInternal);
        gr2.addQuery('sys_user_role', '!=', sysIdSncExternal);
        gr2.query();

        while (gr2.next()) {
            // exclude the roles if that contain snc_internal
            var role = gr2.sys_user_role;
            var containedRoles = api.findAllContainedRolesForRole(role);
            if (containedRoles.contains(sysIdSncInternal))
                continue;
            gs.print('Found an ACL with snc_external and yet another role=' + role + '; ACL sys_id=' + aclSysId);
            counterBadExternalACLs++;
            break;
        }
    }

    gs.print('Total number of ACLs with snc_internal and other roles: ' + counterBadInternalACLs);
    gs.print('Total number of ACLs with snc_external and other roles: ' + counterBadExternalACLs);
}