only Manager should be able to submit the catalog item

[Riri]

Hello Everyone,

Currently I'm working on a scenario where a Manager can only request for Catalog item and no other person can request.

Example: My name is John and my managers name is Mitchell, then in this case only my manager to whom I report should be the only one who can request for this item for me. Suppose there is one more Manager whose name is Lisa and I don't report to her, in that case even if she tries to submit for me, then it shouldn't happen. She should not be able to submit a request for me. 

for this I wrote Script Include & Catalog OnSubmit script:

SI:

var managerValidation = Class.create();

managerValidation.prototype = Object.extendsObject(AbstractAjaxProcessor, {

    isManager: function (){

        var requestedFor = this.getParameter('sysparm_requested_for');

        var currentUser = this.getParameter('sysparm_currentUser');

        gs.info(requestedFor);

        gs.info(currentUser);

        var userGR = new GlideRecord('sys_user');

        if (userGR.get(requestedFor)){

            var managerSysId = userGR.getValue('manager');

            gs.info(managerSysId);

            if (managerSysId == currentUser){

                return 'true';

            }

            else{

                return 'false';

            }

        }

    },

    type: 'managerValidation'

});

CS:

function onSubmit() {

    var answer;

    var requestedFor = g_form.getValue('requested_for');

    var currentUser = g_user.userID;

    alert(requestedFor);

    alert(currentUser);

    var ga = new GlideAjax('managerValidation');

    ga.addParam('sysparm_name', 'isManager');

    ga.addParam('sysparm_requested_for', requestedFor);

    ga.addParam('sysparm_currentUser', currentUser);

    ga.getXML(ajaxCallback);

    function ajaxCallback(response) {

        answer = response.responseXML.documentElement.getAttribute("answer");

        alert(answer);

        if (answer == 'false') {

            alert('Only manager');

            return false;

        } else {

            alert('Success');

            return true;

        }

        // return true;

    }

}

So rn what is happening is it is checking for every alert associated with it but it is allowing other people to submit as well. Ideally it should just abort the action but the item is getting submitted.

[Gaurav Vaze]

One approach is to create user criteria
simply create a user criteria with following code and add this newly created criteria in the available for 

(function() {
    var userSysId = gs.getUserID();
    var gr = new GlideRecord('sys_user');
    gr.addQuery('manager',userSysId);
    gr.query();
    return gr.hasNext();
})();

Mark the solution as helpful and accept if it helps

Thanks
Gaurav Vaze
Servicenow Developer 

[komal zatale1]

Tried the solution! Thank you

[Deepak Negi]

You need to apply reference qualifier on the Requested for variable to show only the reportees of logged in user. This way you will restrict them at selection only so no one except the manager can submit the item.

Go to Dictionary of the Requested for variable

Set Ref Qual as

Manager || is Dynamic || Me

Please mark answer helpful or correct if it helps.

Thanks

Deepak

[Deepak Shaerma]

Hi @Riri 

Can you please explain me, how do you handle the reports to in servicenow. How do we know that you reports to which manager. Is there any field on user table for this?

If my response helped please mark it correct/helpful
Regards
Deepak Sharma