ACL script

[Selva Arun]

Hi All, I have a requirement where only support group members should be able to edit records on the application(cmdb_ci_appl) table. I'm getting lost while writing the script on the ACL as I'm still learning to code. Can anyone help me with the script, please? Thank you.

[Amit Gujarathi]

Hi @Selva Arun ,
I trust you are doing great.
Please find the sample code for the same

(function() {
    // Replace 'support_group_sys_id' with the actual sys_id of your support group
    var supportGroupSysId = 'support_group_sys_id'; 
    var userGrpMember = new GlideRecord('sys_user_grmember');
    userGrpMember.addQuery('group', supportGroupSysId);
    userGrpMember.addQuery('user', gs.getUserID());
    userGrpMember.query();

    return userGrpMember.hasNext(); // Returns true if the user is a member of the group
})();

[Anand Kumar P]

Hi @Selva Arun ,

Create write acl on cmdb_ci_appl table and use below script

var currentUserID = gs.getUserID();
var grMember = new GlideRecord('sys_user_grmember');
grMember.addQuery('user', currentUserID);
grMember.addQuery('group.name', 'Support Group'); //update with group name
grMember.query();
if (grMember.next()) {
    answer = true; // Allow access
} else {
    answer = false; // Deny access
}

Please mark it as helpful and solution proposed if it serves your purpose.

Thanks,

Anand

[Ankur Bawiskar]

@Selva Arun 

you should ensure table level WRITE ACL has that script and there should be only 1 table level WRITE

what did you start with and where are you stuck?

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Dipen Wadhwana]

Hi @Selva Arun ,

Please try the below code:

if (gs.getUser().isMemberOf('supportGroupName')) {
    answer = true; // Allow access
} else {
    answer = false; // Deny access
}

Please mark this response as helpful if your question has been answered correctly.