Data Filtration - exclude rules when user is caller

[Marcus Roworth]

I am investigating using Data Filtration to limit what users can see. I want to limit visibility to specific incident categories and assignment groups. However, when I build them, the user has their own tickets filtered out. The following scenarios need to be met:

-User can see: tickets they created

-Users cannot see: tickets assigned to group A with category B

-Users can see: tickets assigned to group A with category B that they created.

I tried adding a condition caller | is not | javascript: gs.getUserID(), however it doesn't accept it (like it would in the table query builder).

TLDR: I want to build a data filtration rule that applies the data condition UNLESS the user created the ticket.

Does anyone have any suggestions? I cannot use ACLs and I have already tried using query business rules to achieve the same solution (however my query is too complex to work).

[Pavan Kumar28]

Hello @Marcus Roworth ,

could you please let me know how to open this PRB1811326, I want to share this to my leads.

regards,
Pavan.

[Marcus Roworth]

I don't believe we can view ServiceNow Problem records (though you may be able to ask for an update/info via a HI case). 

However, the general context of the PRB was to do with conflicts between query business rules and data filtration. I created a data filtration rule which hid incidents assigned to groups with a specific type. When the group is active, the data filtration rule works as expected, when the group is inactive, the data filtration rule stops taking effect (users who do not match the security criteria can see the tickets).

My scenario was: admins or members of certain groups (e.g. "customer group one" can see incidents assigned to special groups (e.g. group type "special group"). If INC0987661 has the group "Local App Support" assigned (which is a group with the "special group" type) then only admins and members of "customer group one" should be able to see it. As soon as "Local App Support" is set inactive, non-admins/users who are not members of "customer group one" can see the ticket, even though the data filtration rule should filter it out.

Hope this helps. I believe the main focus of the PRB is to develop Data Filtration from the ground up, taking into account how query business rules could affect it.

[Mark Manders]

You are correct. If there is a known issue you may be able to find the document on it, but PRB records on NowSupport are useless. They don't contain any information and are only visible if you have a case related to the problem.