Create manually tasks only for specific catalog item (ACL)

[Victor Monteale]

Hi everyone, I have a question about ACLs. I need to allow users with the 'itil' role to create sc_tasks only for requested items related to a specific Catalog Item. I started creating an ACL for users with ITIL role: 

This ACL allows me to see the "New" button on the "Catalog tasks" related list inside the RITM record:

My stopper, for now, is not knowing how to hide this button when the Item is different than "Test" in the Requested Item. Do you think I should add a condition to the ACL? Do you have an idea of what I am missing?

[Tony Chatfield1]

Hi, your partial screenshot and description doesn't make your configuration clear;
But ACL's are cumulative, so you would need to review and possibly update any existing OOB ACL's in order to deny any existing access, before adding new access to allow an action.

I would start by enabling security debug and evaluating ACL's related to the table\action - you may find impersonating an itil user the best way to confirm ACL's currently allowing their actions.

ACL debugging tools (servicenow.com)

[Victor Monteale]

Part of the solution is related to ACLs. The other part is related to Lists control. Thanks for your help.

[POOJA SINGH18 · Accepted solution]

Hi @Victor Monteale 

The new button on the related list , you can control the visibility with help of list control:

 Once you click on List control, you can further modify your new button visibility based on your requirements.

Hope it helps and please mark helpful if it solves the issue.

Thanks,

Pooja Singh

[Victor Monteale]

Thanks for your solution