Make All Incident Fields Read-Only When Impersonating the Assigned To User

[DevYadav]

I have a requirement to make all fields in the Incident table read-only when I impersonate the user who is set in the "Assigned to" field of that specific incident record. Essentially, when I impersonate the assigned user and view/edit that particular incident, all form fields should become read-only to prevent modifications. I need guidance on the most efficient approach to achieve this functionality - whether through UI Policy, Client Script, or Business Rule - that can detect when the current impersonated user matches the incident's assigned to field and dynamically make all fields read-only for that scenario. What would be the recommended method to implement this user-specific impersonation check and are there any performance considerations I should keep in mind?

[Chaitanya ILCR]

Hi @DevYadav 

create a Deny unless write acl

with script

var impObj = new GlideImpersonate();

answer = !(gs.getUserID() == current.getValue('assigned_to') && impObj.isImpersonating());

Please mark my answer as helpful/correct if it resolves your query.

Regards,
Chaitanya

[Manoj89]

Hi,

Add a security attribute "Impersonating=false" to the table level write ACL of Incident table.

[tajinderpal]

Hi @DevYadav 

You can create a new On Load client script:

(function executeRule(current, gForm, gUser, gSNC) {
// Check if impersonation is active
if (g_user.hasRole('admin')) return; // Skip admin users

var actualUser = g_user.userID; // The logged-in user (could be impersonated)
var assignedTo = gForm.getValue('assigned_to');

// Check if impersonating and user matches the "Assigned to" field
if (actualUser === assignedTo && top.NOW.user && top.NOW.user.impersonating) {
// Make all fields read-only
var allFields = gForm.getEditableFields();
for (var i = 0; i < allFields.length; i++) {
gForm.setReadOnly(allFields[i], true);
}
}
})(current, gForm, g_user, g_snc);

Thanks,

Tajinder

Please consider marking my answer as helpful and accepting it as the solution if it assisted you in any way.