ACL to allow a delegate of an approver see the attachment

[matt_a]

Can someone assist in an ACL that will allow a delegate of an approver the ability to read the attachments on the tickets?

I can see the existing ACL for the approver:

answer = getAttachmentApproverRead();

function getAttachmentApproverRead() {
    
    var user = gs.getUserID();
    var gr = new GlideRecord('sysapproval_approver');
        gr.addQuery('document_id',current.table_sys_id);
        gr.addQuery('approver', user);
        gr.query();

        if (gr.next()) {
            return true;
        }
    

}

Please could someone assist me in changing this script to allow delegates access as well?

Many thanks in advance

[Ankur Bawiskar]

Hi,

Update it as below and check once:

it checks whether current logged in user is delegate of the approver;

answer = getAttachmentApproverRead();

function getAttachmentApproverRead() {

var user = gs.getUserID();
var isUserDelegate = false;
var userDelegate = new GlideRecord('sys_user_delegate');
userDelegate.addQuery('user', current.approver);
userDelegate.addQuery('delegate' ,user);
userDelegate.query();
if(userDelegate.next()){
isUserDelegate = true;
}


var gr = new GlideRecord('sysapproval_approver');
gr.addQuery('document_id',current.table_sys_id);
gr.addQuery('approver', user);
gr.query();
var rowCount = gr.getRowCount():
if (rowCount == 1 || isUserDelegate) {
return true;
}
return false;

}

Mark Correct if this solves your issue and also mark Helpful if you find my response worthy based on the impact.
Thanks
Ankur

[matt_a]

Thanks for the response.

Unfortunately, this still doesn't allow the delegate to access. Could it be the  userDelegate.addQuery('user', current.approver);?

[Ankur Bawiskar]

Hi Matt,

This ACL I believe is on sys_attachment table right? so modify code as below:

var user = gs.getUserID();

var gr = new GlideRecord('sysapproval_approver');

gr.addQuery('document_id',current.table_sys_id);

gr.addQuery('approver', user);

gr.query();

if (gr.next())

{

var userDelegate = new GlideRecord('sys_user_delegate');
userDelegate.addQuery('user', gr.approver);
userDelegate.addQuery('delegate' ,user);
userDelegate.query();
if(userDelegate.next()){
return true;
}

return true;

}

Regards

Ankur

[matt_a]

Yes, its on the sys_attachment table. But changing the script to this hasnt had any affect and delegate still prevented from accessing the attachment.

This is what I have:

answer = getAttachmentApproverRead();

function getAttachmentApproverRead() {

    var user = gs.getUserID();
    var gr = new GlideRecord('sysapproval_approver');
        gr.addQuery('document_id',current.table_sys_id);
        gr.addQuery('approver', user);
        gr.query();

        if (gr.next()) {

{
var userDelegate = new GlideRecord('sys_user_delegate');
	userDelegate.addQuery('user', gr.approver);
	userDelegate.addQuery('delegate' ,user);
	userDelegate.query();
if(userDelegate.next()){

	return true;
}
return true;
	}
}
}