How to create ACL to restrict visibility of a field so that some users and groups can view this field

[Nikita40]

I want to create an ACL for cmdb_ci_server table so that for a field, for which I need to restrict visibility so some users and groups will be able to see that field. So How can I create script in ACL to add this users and groups ?

Thanks in advance.

[Sam Ogden]

Hi Nikita,

You could create a custom role and then make a read ACL that requires that role.  Then just assign the role to the groups/users that need to have visibility - this way you shouldn't need to write a script.

As per best practice you may be best to create a new group and assign the role to the group and then add the users to this group - rather than manually assigning the role to individual users.

Hope this helps

Thanks

Sam

[Nikita40]

Thanks for your reply. But I want to do this without creating role.I want to do this using script in ACL.

[aksh3]

Hi Nikita,

I have attached a video which will guide you in implementing the exact above scenario and even help you to understand ACL.

ACL Video

//You can do it through code or adding all to the same group

var answer = false; //Restrict access by default
if(gs.hasRole('user_admin') || current.group.manager == gs.getUserID()){
   answer = true; //Allow access if user has 'user_admin' role or is group manager
}

 Please mark the solution as helpful and correct if it helps you.

Regards,

Akshay

[Ankur Bawiskar]

Hi,

In the Field Level READ ACL Set

-> Advanced checkbox as true

-> Give this script

Ensure you give Group Names and Valid User SysIds for whom it should be seen

answer = checkCondition();

function checkCondition(){

if(gs.getUser().isMemberOf('Group ABC') || gs.getUser().isMemberOf('Group DEF') || gs.getUserID() == "User A SysId" || gs.getUserID() == "User B SysId"){
return true;
}
else{
return false;
}
}

Regards
Ankur