ACL or Client Script?

[carlh]

Hi All,

Looking for advice.

I have a role called "restricted_vendor_manager".     I created that to exclude the inherited itil role.

On our vendor form, I have a related list for locations so they can add the locations the vendor services.   The problem I have is that I have to give them the write "acl" in order for them to see the edit button and be able to use the slush bucket.   I can't have them creating a new location.

I first thought to add a reference list field but they will have to search and add locations one at a time this way.

We want to be able to add several locations at one time.   Example.   there may be a plumber that covers all locations in a certain zip code.   when I use the edit button I can filter by the zip code and add all locations quickly.

can anyone guide me on what I need to do in order to allow this role access to associate a vendor with a location while having no access other than reading a vendor record?

[Abhinay Erra · Accepted solution]

Hide the new button, by giving admin role to the new button on the list control.

[Chuck Tomasi]

Hi Carl,

Most of what you seek can be done with the list control.

Right click the related list header, select Configure> List Control and omit the New button. Also add roles to the edit button you want to grant access to.

Using ACLs, grant READ access to the location table for your restricted_vendor_manager so they can see the list of records to select. For the edit button, they don't need write access to the location table, they need access to the table that is acting as the many-to-many table between the locations and what ever table holds the form you got this screenshot. If you want a quick way to find out what that table is, click the "i" icon on the right of any record in the locations list and observe the URL. It will be something like: m2m_location_task (I made that one up.)

Configuring Lists - ServiceNow Wiki

[carlh]

Abhinay got you by 1 minute.   I tried both solutions and prefer the New Button to show up for the admin so I went with adding admin role to the new button rather than omitting and leaving the rest alone for now.

Thank you for your help as always!

Carl

[Chuck Tomasi]

No worries. Carl. I'm glad you got it resolved. Having multiple options is (usually) a good thing.