Advanced user criteria - trying to restrict catalog item to users with specific company, and without ITIL role

[Chase Stevenson]

Hello, I have an advanced user criteria that is set up to restrict certain users from seeing a catalog item in the Service Catalog.

Here's the script:

var company = gs.getUser().getCompanyID();

if(!gs.hasRole('itil') && company == "TEST"); {

answer = false;

}

What I can't get to work is the user role portion. I've tried (!gs.getUser().hasRole('itil') and that still doesn't work.

There are users in "TEST" company that have ITIL role, and they need to be able to view the catalog item. How can I restrict this to non-itil TEST company users?

[Chase Stevenson]

I changed the company to the sys_id of the company I needed.

I impersonated two separate users in the TEST company, one with ITIL role, and one with NO roles.

Both users are unable to view the catalog item. I need the ITIL user to be able to view it still. It is ignoring the first half of the script: !gs.hasRole('itil')

[dvp]

Can you add else condition and try again

var company = gs.getUser().getCompanyID();

if(!gs.hasRole('itil') && company == "TEST"); {// in 'TEST' you should pass the sys_id of the company
answer = true;
}
answer = false;

[Chase Stevenson]

I added the else answer = false; as you suggested, and now the reverse is happening, every user in TEST company can see the catalog item. I'm unsure what's going on with this, it looks correct, but it's not working. 

Is the following a valid syntax for user does NOT have itil role?

if(!gs.hasRole('itil')

This is the only piece that isn't parsing correctly.

[dvp]

Can you add parenthesis to gs.hasRole 

if( (!gs.hasRole('itil')) && company == "TEST")

[Chase Stevenson]

I did as you suggested and still not working: