I getting issue that ITIL user able to edit the other user details as he have ITIL roles ,Can anyone help me that how I restrict this

[Rajababu]

Hi,

I got some issue ,That   ITIL user can edit or modify the details other ITIL user that breaches some security or its not desired as per requirement .

So how I able to restrict the ITIL user can edit only his details like on incident ticket he will able to edit only his ticket details if ticket assigned to other then only

then only whom to assigned or group they were able to to.

So any one can suggest on above.

Thanks,

Gaurav Rai

ctomasi Michael.Frysnowdevbtruong@ethosgroup.compradeepksharmasurendarmramireddylarstangerob.phillips

[paramveer]

if (gs.getUser().isMemberOf(current.assignment_group) || (current.assigned_to == gs.getUseID()) || current.requester =- gs.getUseID()))         {

answer = true;

}

else {

answer = false;

}

Above code will take care of your query.

[Rajababu]

Hi ,

Still I am able to edit some fields by other itil user s.

You can see Impact,Short description and Caller.Able to edit .

If we create again for every field ACL or some other way like any script or therway to do.

Thanks,

Gaurav Rai

ctomasiMichael.Fry

[Chuck Tomasi]

The safest way to allow edit permission on those fields you want is to create an ACL to allow write access to each of them individually based on role or condition (or script.)

Using Access Control Rules - ServiceNow Wiki

[Rajababu]

Hi Chuck,

If there is already ACL defined for other purpose then how I can crack down that conflict.

Thanks,

Gaurav Rai

[Chuck Tomasi]

Refer to section 8 here to help debug what is being used and what is not.

Using Access Control Rules - ServiceNow Wiki