Catch 22 on Closed Cases

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-30-2024 08:00 AM - edited 10-30-2024 08:40 AM
Our stakeholders do not want for users to be able to add comments to cases after the cases are Closed or Cancelled, because such comments will not be seen by anyone. So I modified the Write Access Control (ACL) for our sn_hr_core_case table to require records to be Active and also NOT in a state of cancelled...
The problem is, it looks like after a user changes a case to Closed or Cancelled, the system still needs to add a couple things to the Activity Stream, and it can't do so because of the ACL, and thus an error message is displayed. After the case is Closed or Cancelled, the system still might need to notate in the case that an email was sent out. So what am I doing wrong, or what is a graceful way to handle this?
Here is what things look like when they WORK because they are done by an Admin (which passes the ACL checks). You can see in (2) that some stuff gets added to the activity stream:
Here is what things look like when they are NOT working, because they were performed by a non-admin.
And here was my attempt at changing the ACL:
Again, the goal is to stop regular users from adding Comments to cases after the cases are closed, but I still want "the system" to be able to add things to the case, for example in the activity stream, and say that X value was changed to Y or that such-and-such email was sent out to the user. Thanks!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-30-2024 11:07 AM - edited 10-30-2024 11:14 AM
Hi @G24 ,
Can you please check if the error still comes if you set the 'Admin overrides' to checked as below? If not then that might solve the purpose.
You can also try selecting 'Interactive session' in the ACL condition as true as shown below. Interactive session will be true if the current session is interactive that means the logged in user is an actual user not any integration user or system user.
If this address your question, please mark this response correct by clicking on Accept as Solution and/or Kudos.
You may mark this helpful as well if it helps you.
Thanks,
Animesh Das

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-30-2024 11:55 AM
@Animesh Das2 I have the "Admin overrides" checkbox set to TRUE for the ACL and I did notice that when I (as an admin) perform the Close action on the case, there is no error message.
I tried setting the "Security Attribute Condition" to local (as you showed) and specifying Interactive Session is True, however when a non-admin closes the case, he still gets the error message in HR Agent Workspace.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-30-2024 12:20 PM - edited 10-30-2024 12:36 PM
Hi @G24
Are you sure it is coming due to the ACL modification only and not due to any BR? Just being curious I am asking.
If you are sure it is the ACL causing the issue can you use 'Access analyzer' to analyze the access and permission for any system user account or integration user account and review the access result which ACL is blocking in this case exactly.
You can use traditional 'Debug security rules' as well for this.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-30-2024 01:28 PM
@Animesh Das2 Yes, I'm sure it's related to the ACL because when I remove my new constraints the problem goes away.
I've never used Access Analyzer before, but I tried it, and I didn't see anything obvious.
I also tried Debug Security Rules, on your suggestion, but honestly the output is WAY too long and complicated. There are thousands and thousands of messages in there and I really don't know what I'm looking for. I'm doubtful that approach is going to help me in this case. I'll just enter a support ticket. 😕