How can I restrict that only the support groups which the task is assigned can modify it?

[fabiangr]

Dear All

I am new in servicenow and I have a request since into the problem tasks everyone can manipulate the task even if they don not belong to the support group.

I would like to know how can I restrict that only the support group which the task is assigned can modify it

[Matt Saxton - G]

Welcome Fabian,

You want to use ACL rules to allow this.

http://wiki.servicenow.com/index.php?title=Using_Access_Control_Rules#gsc.tab=0

Check for isMemberOf current.group

http://wiki.servicenow.com/index.php?title=Getting_a_User_Object#gsc.tab=0

[fabiangr]

Thanks for your quick response Matt.

Do you have an example?

[The SN Nerd]

ACL

problem_task.write

Script:

answer = gs.getUser().isMemberOf(current.assignment_group);

http://wiki.servicenow.com/index.php?title=Getting_a_User_Object#gsc.tab=0

myUserObject.isMemberOf()

-- returns true or false if the current user is a member of the provided group (takes a group name or sys_id as its argument)

Keep in mind that these kinds of security requirements can be too restrictive.

If the tickets assignment group gets cleared, you'll then find no-one can modify the ticket.

It could also get assigned to an empty or incorrect group.

You may wish to include another type of user who can modify tickets regardless of the assignment group.

If users are modifying tickets they shouldn't, everything is audited. These type of restrictions are often not necessary and cause more problems than they solve.

[Steven1]

Agree : These type of restrictions are often not necessary and cause more problems than they solve.