We need to allow self-service users to see records based on a location versus based on a requested for or affected user. While this ability exist on incidents we need to make visibility on other tables as well. We want to ensure this does not violate a licensing agreement. So my question is if we allow self service users to READ but not WRITE to many other tables other than INC and REQ is this ok without a licensing change? So basically I would be modifying the rule below to allow visibility to all records on many tables.
Consider the following example from a default business rule that limits access to incident records.
• Name: incident query
• Table: Incident
• When: before, query
• Script:
if(!gs.hasRole("itil") && gs.isInteractive()) {
var u = gs.getUserID();
var qc = current.addQuery("caller_id",u).addOrCondition("opened_by",u).addOrCondition("watch_list","CONTAINS",u);
gs.print("query restricted to user: " + u); }
This example prevents users from accessing incident records unless they have the itil role are listed in the Caller or Opened by field. So, for example, when self-service users open a list of incidents, they can only see the incidents they submitted.
Note: You can also use access controls to restrict the records that users can see.
