ACL is not working

[Abigail]

I need to restrict to assigned to users in change request made changes on the state field, just in case this user belongs to an "IT.I.SIAM.Change_Management" group this must have access.

Any idea what I'm doing wrong?

[Aman Kumar S]

Hi @Abigail ,

Try using below:

var currentUser = gs.getUser().getID(); 

if(current.assigned_to == currentUser){
answer = true;
}
else{
answer =false;
}

[Manmohan K]

Hi @Abigail 

Take the below steps

1. Mark your ACL as active= true

2. You need to reverse the condition provided in the script.

If answer= true, ACL will allow access and if answer= false, it will block access

3. Also check if there are any other ACLs on state field in change request table. They can also provide access even if it is blocked by this ACl

[Natascha deJ]

Hi, 
ACL's do not restrict access in the sense that you can use an ACL to block someone. ACL's GIVE access. So what is important is that you check that there are no ACL's that allow people from this group access. You can imagine an ACL as a key, once you have a key, you can open the door. It does not matter that you are blocked from having another key to the same door.