Only opened by should able to see RITM not other how to restrict

[s_nandhini]

Hi All,

I have a requirement only opened by should able to see the Req and RITM not other even requested for should not able to see the request for particular catalog item.

I tried restricted via ACL and Query BR but still requested for and other ITIL users able to see the RITM and REQ.

Please guide me which is the best approach.

[s_nandhini]

I tried but not working .

(function executeRule(current, previous /*null when async*/ ) {

    var restrictegrp = 'sys_id';

    if (!gs.getSession().isInteractive() || gs.hasRole('admin') || gs.getUser().isMemberOf(restrictegrp)) {

        return;

    }

    var userId = gs.getUserID();

    var restrictedItemSysId = 'sys_id';

    var ritmGr = new GlideRecord('sc_req_item');

    ritmGr.addQuery('cat_item', restrictedItemSysId);

    ritmGr.addQuery('opened_by', '!=', userId);

    ritmGr.query();

    var hiddenReqIds = [];

    while (ritmGr.next()) {

var reqid= ritmGr.getValue('request');

        if (reqid) {

            hiddenReqIds.push(reqid);

gs.info('Hidden Request IDs: ' + hiddenReqIds);

        }

    }

    if (hiddenReqIds.length > 0) {

        current.addQuery('sys_id', 'NOT IN',  hiddenReqIds.join(','));

    }

})(current, previous);

[s_nandhini]

@Yogesh11bhatt  

The code is not working it is going to the else loop.

(function executeRule(current, previous /*null when async*/ ) {
var restrictegrp = 'sys_id';
if (!gs.getSession().isInteractive() || gs.hasRole('admin') || gs.getUser().isMemberOf(restrictegrp)) {
return;
}
var userId = gs.getUserID();
var restrictedItemSysId = 'sys_id';

var ritmGr = new GlideRecord('sc_req_item');
ritmGr.addQuery('cat_item', restrictedItemSysId);
ritmGr.addQuery('opened_by', '!=', userId);
ritmGr.query();

var hiddenReqIds = [];
while (ritmGr.next()) {
gs.info('Found RITM: ' + ritmGr.sys_id + ' request: ' + ritmGr.request);
if (ritmGr.request) {
hiddenReqIds.push(ritmGr.request.toString());
}
}

if (hiddenReqIds.length > 0) {
gs.info('Hiding requests: ' + hiddenReqIds.join(','));
current.addQuery('sys_id', 'NOT IN', hiddenReqIds.join(','));
} else {
gs.info('No restricted RITMs found for user ' + userId);
}

})(current, previous);

[s_nandhini]

@Ankur Bawiskar 

I tried this code in Request table but it not hidding only for particular item its hidding all the catalog item if opened by is not the logged in.

(function executeRule(current, previous /*null when async*/ ) {
var restrictegrp = 'sys_id';
if ( gs.hasRole('admin') || gs.getUser().isMemberOf(restrictegrp)) {
return;
}
var userId = gs.getUserID();

var catItemId = 'sys_id';

var disable = current.addJoinQuery('sc_req_item', 'request'); // request is the reference field on sc_req_item
disable.addCondition('cat_item', catItemId);

current.addEncodedQuery('opened_by=' + userId + '^NQrequest_item.cat_item!=' + catItemId);

})(current, previous);

Even i mentioned only item need to be restricted, all sc_request got restricted for all users

[Ankur Bawiskar]

@s_nandhini 

your syntax is wrong

current.addJoinQuery()

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏