ACL for restrict access to a RITM details based on group membership?

[Fotios Kossyvas]

I am trying to write an ACL so i can restrict access to RITM view (even to admin) when 

user is not member of group "HR" or user is not the opened_by user

I want to hide just everything, including all variables (i have some) and attachments.

The best thing would be not even opening the form and just showing an alert message.

I think that, even if it seems more easy using a Client Script and the onLoad event to hide everything, is not secure because someone could always open a related task of the RITM and then check some info pressing the [i] button

Can it be done with one (or more) ACL's and how?

[Mohith Devatte · Accepted solution]

hello @Fotios Kossyvas if you want to Hide all the variables , tabs and fields on the RITM then directly try creating a query Business rule which will hide the record itself for your conditions instead of creating multiple acls to hide fields or to remove access query BR will make your life easy .

Hope this helps 

Mark my answer correct if this helps you

Thanks

[Fotios Kossyvas]

Hi  Mohith Devatte,

could you please show me (or post a link) how to do it?

I have seen dozens of tutorials on web today trying to understand how i can use the user role to check the visibility but all of them are made for other reasons (adding custom filed on the query etc).

Thank you in advance