Read ACL based on Assignment Group and Service

[kristenmkar]

Good evening! 

I am trying to logically think of the best way to do this - we have a team/group who deals with financial information and do not want other teams viewing their descriptions within tickets (rest of the ticket is okay).  The problem is that I can't restrict the entire ticket from all users, as the customer may call in to check the status - I do think it's fine to restrict any associated tasks, etc. but the Incident and Request Status need to remain accessible for agents to advise customers of ticket status. So my question is this - can I utilize an ACL (or maybe UI policy?) based on if the service is a specific value, only members of this group can view that field? Thinking for Short Description and Description I could use something similar to answer =  gs.getUser().isMemberOf('team name') - but this is only applicable if that service is being used for the specific team on a ticket. What do you guys suggest? 

Thank you! 🙂 

[Chaitanya ILCR · Accepted solution]

Hi @kristenmkar ,

go with Deny Unless read acl on those fields

select the table and the field

add a filter on which records this ACL should be evaluated

add a security attribute or script(one is enough)

repeat the same for the other field

Please mark my answer as helpful/correct if it resolves your query.

Regards,
Chaitanya

[kristenmkar]

This worked beautifully, thank you! 🙂