How to make an RITM Visible to a specific group and the requested for person

[JPSS]

How to make an RITM Visible to a specific group and the requested for person

[Sandeep Rajput]

@JPSS You need to create Read ACL on the RITM and allow the read access if the user is member of specific group or user is a requested for person.

[Ankur Bawiskar]

@JPSS 

you should use query business rule for this to restrict.

if you use table level READ ACL users might see security constraint message

[JPSS]

Hi Ankur.

I tried with query business rule but i was not able to include the both scenario 

(function executeRule(current, previous /*null when async*/ ) {

if ((!gs.getUser().isMemberOf('**group sysid**'))||( gs.getUser().getEmail()!=current.requested_for.email))

{

current.addEncodedQuery('cat_item!=**cat item sysid**');

}

})(current, previous);

@Ankur Bawiskar  Can you please help me with this

[Gurpreet07]

We usually manage the RITM access based on Assignment group / Assigned to / Requested for / Requested by / Created by fields.  If logged in used is part of these then we grant the access through ACL Or before query rule.  So set the the assignment group for different RITMs in the workflow and that group automatically get the access on the item.