I getting issue that ITIL user able to edit the other user details as he have ITIL roles ,Can anyone help me that how I restrict this

[Rajababu]

Hi,

I got some issue ,That   ITIL user can edit or modify the details other ITIL user that breaches some security or its not desired as per requirement .

So how I able to restrict the ITIL user can edit only his details like on incident ticket he will able to edit only his ticket details if ticket assigned to other then only

then only whom to assigned or group they were able to to.

So any one can suggest on above.

Thanks,

Gaurav Rai

ctomasi Michael.Frysnowdevbtruong@ethosgroup.compradeepksharmasurendarmramireddylarstangerob.phillips

[paramveer]

Create write acl on sys_user table. Below is the screenshot of ACL.

in Script write below code :

if(current.sys_id = gs.getUserID()) {

  answer = true;

}

else {

  answer = false;

}

Thanks,

Param

[Rajababu]

HI Pram,

If Like in this how i will able to restrict user that have role itil he will able to edit only his ticket.

As you above mentioned on that how i will able restrict the user to not editable .

Thanks,

Gaurav Rai                  

[Deepa Srivastav]

Hi Gaurav,

There must be a write ACL on incident table where you need to add the below script to achieve ur req.

if (gs.getUser().isMemberOf(current.assignment_group) &&( caller_id=javascript:gs.getUserID()|| opened_by=javascript:gs.getUserID()))

answer=true;

[Deepa Srivastav]

You can add script in the ACL and add below for this:-

if (gs.getUser().isMemberOf(current.assignment_group) && (current.urfieldname ==gs.getUserName()))          

answer=true;

Mark Correct if it solved your issue or hit Like and Helpful if you find my response worthy.

Thanks,
Deepa