Incident record(eg:INC0010001) need to visible only for the particular Assignment group members.

praveen1231
Tera Contributor

Hi,

My scenario is- I had created new Record Producer and submitted the record (INC0010001). I added the Record Producer script to set the Assignment group. When I impersonate with another user who is not in assignment group, the record (INC0010001) need not to be displayed. Incident record (INC0010001) is only visible to assignment group members, who is in the incident table assignment group filed. Please let me know if you have any idea regarding this. Thanks

2 ACCEPTED SOLUTIONS

In that case, you are going to need to review your ACL's.

 

All Read ACL's which contain some relationship to a user in a group or a group itself will need to be checked.

In condition you can add Assignment group , Is dynamic , One of my groups.

 

Please make sure you don't edit the ACL's related to for example the caller, watchlist etc, because you will limit the user to see and update their own records.


Help others to find a correct solution by marking the appropriate response as accepted solution and helpful.

View solution in original post

Hi @praveen1231,

 

Have you gone through all other incident ACL's? Just creating a new one is not enough.

If any ACL's matches it will give access, so the OOTB ACL's, are now probably just saying, this user has itil or incident_read role, so that user can see all incidents.


Help others to find a correct solution by marking the appropriate response as accepted solution and helpful.

View solution in original post

26 REPLIES 26

ServiceNow Use6
Tera Guru

GlideAJAX

 

function onLoad() {

    var user1 = g_user.userID;
	//alert(user1);
    var obj = new GlideAjax('checkIfUserExistsClass');
    obj.addParam('sysparm_name', 'checkIfUserExistsFunction');
    obj.addParam('sysparm_Id', user1);
    obj.getXML(callBackFunction);

    function callBackFunction(response) {
        var answer = response.responseXML.documentElement.getAttribute("answer");
		//alert(answer);
        if (answer == 'true'){
           g_form.setVisible('add_to_url_category', true);
		}
    
	     else{
           g_form.setVisible('add_to_url_category', false);

 

ScriptIncludes

 

var checkIfUserExistsClass = Class.create();
checkIfUserExistsClass.prototype = Object.extendsObject(AbstractAjaxProcessor, {

    checkIfUserExistsFunction: function() {
        var param = this.getParameter("sysparm_Id");
        var gr = new GlideRecord('sys_user_grmember');
        gr.addQuery('user', param);
        gr.addEncodedQuery("group=ad53348b874a0510b2bab996cebb35b5^ORgroup=49775841879a0510715986ad0ebb3555^ORgroup=4f73fea18721c1109f887487cebb350f^ORgroup=c2733ea18721c1109f887487cebb35a8");
		
        gr.query();
        if (gr.next()) {
            return 'true';
        }


        return 'false';
    },

    type: 'checkIfUserExistsClass'
});

 

Regards

Suman P.

@ServiceNow Use6 

I think you are posting to a wrong thread. This has nothing to do with the question.


Help others to find a correct solution by marking the appropriate response as accepted solution and helpful.