How to restrict admin in ACL and allow a specific role ?

[Heena Dahiya]

I am working on Geneva version and I am trying to restrict admin override on ACL with the below script.

I intend to allow only users with "contact manager" role to view my field and restrict all others even if they are admin, I have unchecked admin override

I have tried the below two scripts, can someone help me figure out the glitch. Thanks Advance !!

// Allow access only if the contract manager role is present else restrict even if its admin.

if (gs.hasRoleExactly('contract_manager')) {

  answer = true;

}

else {

  answer = false;

}

and

// Allow access only if the contract manager role is present else restrict even if its admin.

if ((gs.hasRole('contract_manager') && gs.hasRole('admin')) || (gs.hasRole('contract_manager') && !gs.hasRole('admin'))) {

  answer = true;

}

else if (!gs.hasRole('contract_manager') && gs.hasRole('admin')){

  answer = false;

}

else {

  answer = false;

}

Regards,

Heena Dahiya

[kittylasers]

Using Brad's example, I've also had success with a one-liner like this:

if (gs.getSession().getRoles().toString().indexOf('<role to validate>') > -1) { return true; }