ACL condition script

[Leonel Sandroni]

Hi there,

I have a customer requirement to accomplish. On demand records only members of child groups of the assignment group can create, edit and delete demand tasks.

In the dmn_demand_task table I have modified ACLs permissions with the next condition:

parent.assignment group | is (dynamic) | One of my groups

But unfortunately it doesn't work

Is there anyway to write this condition as script? or some another solution?

remember: child groups of the primary assignment group can edit

Suggestions?

[Ankur Bawiskar]

@Leonel Sandroni 

use script like this

var groups = new global.ArrayUtil().convertArray(gs.getUser().getMyGroups());

if(groups.indexOf(current.parent.assignment_group) > -1)
	answer = true;
else
	answer = false;

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Leonel Sandroni]

Thanks for that! Unfortunately it does not work 😞

[Ankur Bawiskar]

@Leonel Sandroni 

the script gets logged in user's group and then checks if the record's parent assignment group is one of those

that's what you were doing in the condition

Are you saying members of child assignment group of parent group can edit?

if yes then do this

var currentGroup = current.assignment_group;

var arr = [];
// get all child groups of this
var gr = new GlideRecord("sys_user_group");
gr.addQuery("parent", currentGroup);
gr.query();
while (gr.next()) {
	arr.push(gr.getUniqueValue());
}

var mem = new GlideRecord('sys_user_grmember');
mem.addQuery("group", "IN", arr);
mem.addQuery("user", gs.getUserID());
mem.setLimit(1);
mem.query();
answer = mem.hasNext();

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Leonel Sandroni]

Yes, that's the requirement but when I talk about "assignment group" I mean assignment group of demand record so first I need to refer the assignment group field of the parent task (because I'm working with in dmn_demand_task table not in dmn_demand table) and then get the members of child groups from the primary assignment group

Should I re-define the variable as "current.parent.assignment_group" rihgt?