ACL Question Please

[Dave_p]

Hi,

I want to see that the 'short description' of the 'incident' is editable only by the 'Analytics Settings Manager' group. But when I impersonate Adela, she is also able to edit it. Kindly help.

Application Engine group

//sys_id of Analytics Manager group: 019ad92ec7230010393d265c95c260dd
if(gs.getUser().isMemberOf('019ad92ec7230010393d265c95c260dd')){
	answer=true;
}
else{
	answer=false;
}

[Ankur Bawiskar · Accepted solution]

@Dave_p 

are you sure that user is not part of that group?

Any other field level WRITE ACL is allowing the edit?

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Dr Atul G- LNG]

Hi @Dave_p 

https://www.servicenow.com/community/now-platform-forum/create-acl-for-group-access-only/td-p/247953...

https://www.servicenow.com/community/itsm-forum/need-to-write-an-acl-to-allow-only-members-of-partic...

https://www.servicenow.com/community/itsm-forum/create-an-acl-to-make-a-record-visible-to-only-those...

[Rohit Singh]

Hi @Dave_p ,

First check if the Adela is having ITIL or sn_incident_write role. If Yes

Then There must be total 3 ACL written on incident.description and Operation: "write"

You have to deactivate the one which have "sn_incident_write" because this ACL is again allowing user who have sn_incident_write role. ITIL role inherit this role. 

Also try to use: gs.getUser().isMemberOf('GROUPNAME')

If my response helped, please mark it helpful and accept the solution so that it benefits future readers.

Regards,
Rohit

[Rohit Singh]

Hi @Dave_p ,

Did you tried above solution.

If my response helped, please mark it helpful and accept the solution so that it benefits future readers.

Regards,
Rohit

[Ankur Bawiskar · Accepted solution]

@Dave_p 

are you sure that user is not part of that group?

Any other field level WRITE ACL is allowing the edit?

If my response helped please mark it correct and close the thread so that it benefits future readers.