How to lock down Change Task so the user (non-change_manager or non-admin user) cannot move task

[crisdaniel]

How to lock down Change Task so the user (non-change_manager or non-admin user) cannot move task from the Open state back down to the Pending state? We have users moving their CTASKs back to Pending state while the Change is in Implement state. We need the CTASK to remain in Open state until the user has completed their testing and they should then close their CTASK.  I was hoping for something out of the box, but I'm not seeing anything. 

[DrewW · Accepted solution]

Easiest way is to use an onLoad client script to check to see if the user does not have the roles you specified and then if the change task is NOT currently in the Pending state remove Pending from the choice selections by using the g_form.removeOption.

https://developer.servicenow.com/dev.do#!/reference/api/utah/client/c_GlideFormAPI#r_GlideFormRemove...

Then you should probably add a business rule to abort any update that changes the state to Pending when the users does not have the roles.

[crisdaniel]

Thank you Drew! That worked!