Record Visibility on Demand record

[AbdulNow]

Our demand form includes a custom Boolean field (True/False). We require that demands with this field set to True are only visible to specific users:

Submitted by or created by : The user who created the demand.

Members of the "Demand Manager" group.

Collaborators on the demand.

Administrators.

I have attempted to implement this visibility limitation using Read ACL and Before Query Business Rules, but neither approach has been successful. Does anyone have suggestions or solutions to achieve this restricted visibility requirement?

[Mark Manders]

Your read ACL's should have done the trick, but you need a couple of them (because an ACL will evaluate all of the conditions, before it's set to true and you will need to script the group membership).
So create one for 'submitted by' is dynamic me, or collaboraters contains me (with admin override = true) and one for the (scripted) groupmember ship.

[AbdulNow]

I tried this before it didn't work out

[Mark Manders · Accepted solution]

Then you need to check on your other ACL's. Are they overriding the ACL where the field is set to true? I just tried it on my PDI with the 'active flag' and it worked. You will need to debug your ACL's if it doesn't on your instance.