Hide Incident Form Section depending in IP address in the sys_user_login_history table

[John Johnson]

Hello Smart People!

I have been trying to hide an incident form section like 'notes' for users outside of an IP CIDR. Everything i've tried has not worked. With what i'm doing, it is always hidden or not hidden.  Is it because im using the 'user login history' table?

I am looking for some examples of ways others have done this in their systems.  I have tried with Business rules, Client Scripts, and UI Policies with no success.

I appreciate your assistance in advance!

[John Johnson]

Also, wouldn't this be getting the IP from the client?

I've tried several ip ranges with no luck.  Ideas?

[John Johnson]

During testing, i even created a script that had only '

var clientIP = gs.getSession().getClientIP(); 

and it showed the same ip address that i have listed for my login on the 'sys_ user_login_history' table. So, i changed the CIDR to reflect that ip  xxx.xxx.xxx.0/24, and the notes section is blocked.  

i close all screens on my network and go to a personal computer and log into the instance. I open an incident and DONT see the notes section.  I then log out of my personal computer, which has a 172.xxx.xxx.0/24 CIDR and log into my work computer which has a 206.xxx.xxx.0/24 CIDR open an incident and i DONT see the 'notes' section

Any assistance you can provide will be greatly appreciated!

[John Johnson]

I have also tried it with my exact IP address on my network and still can not see the 'notes' tab.

[Jim Coyne]

You should do it with a combination of Display Business Rule to figure out the validity of the IP address which would populate the g_scratchpad object where an onLoad client script could read the value and then hide the section if it had to.

HOWEVER, that and the solutions above only work on a form, and NOT for list views.  If you really want to hide the information, a number of ACLs would be the best solution.  That way users would not see the info through a customized list view.