Access to data in RITM, Task, Req related to Catalog item

[AnthonyMull]

Hi Community,

I have a use case below and want help with best approach:

1. We have catalog item that can be submitted but anyone.

2. ONce submitted, the data in this form and all related records like TASK, RITM, REQ etc. should be only visible but limited number of persons.

3. I would like to create a role to limit this access and assign it to a group, but I am not sure how to associate this restriction to the data above.

4. I would like to make this repeatable and as close to OoB as possible.

Can you help please

Thanks in advance.

[J Siva]

Hi Anthony,

If you are in Xanadu version, then you can create "Deny unless" acl to grant read access to only certain group of people.

For more info please go through the product doc.

https://www.servicenow.com/docs/bundle/xanadu-platform-security/page/administer/contextual-security/...

Thanks,

Siva

[Ankur Bawiskar]

@AnthonyMull 

you can use table level READ ACL on those tables and Query business rule as well

what did you start with and where are you stuck?

If my response helped please mark it correct and close the thread so that it benefits future readers.

[AnthonyMull]

Hi @Ankur Bawiskar please see below my approach

• Created Catagory of catalog item = restricted 
• Creat role called u_restricted 
• Created ACL on sc_req_item table with rules role =u_restricted. Dat condition item.catagory = restricted 

Currently this does not restrict access. Please let me know of any updates that would fix. 

Cheers

[AnthonyMull]

Hi,

Can you help with query business rule please. The ACL I used does not work because of current acls in place.

Thanks in advance