Hi everyone..I have written ACL for restricting write access on incident state field so that this field should be accessible only if state is not one of 'Resolved', 'Closed' or 'Cancelled' and logged in user is a member of 'Assignment Group'

[shaveta]

Hi everyone..I have written ACL for restricting write access on incident state field so that this field should be accessible only if state is not one of 'Resolved', 'Closed' or 'Cancelled' and logged in user is a member of 'Assignment Group'. For some reason, it is not working as expected. Below is the screenshot for same.

Also please note that I have actually changed an existing one so at field level I guess there should be no issue.

[shaveta]

My apologies, Pradeep. I dint get this. What exactly do I need to do.

[Gurpreet07]

What is the label of state field .... is it Incident Status Code .. Normally State is used.

[shaveta]

Yes Gurpreet, client wanted it like this so we changed the label.

[Deepak Ingale1]

Hi Shaveta,

could you share screen captures by turning on the 'security debugger' and impersonating the user in question.

[Gurpreet07]

ok ... got it ... you have error in script at .isMemberOf('current.assignment_group');

it will treat it as string , you need to remove quotes ... like following

.isMemberOf(current.assignment_group);