Restrict Access to Incidents Based on Role

[Randy33]

I'm trying to restrict access to incidents assigned to a specific assignment group to users unless they have a specific role.  I'm trying to you a before query business rule but not having much luck.  Does anyone have a good document explaining how to setup?

[HIROSHI SATOH]

Why not use ACLs? I think it's best practice to implement it with ACLs first.

[Randy33]

How would I do so for only incidents assigned to a certain assignment group?

[Ranjit Nimbalka]

Hi @Randy33 ,
Can you please describe what you really want to achieve?
Do you want to give access to the incident if current user is part of assignment group?

Regards,

Ranjit 

[Randy33]

We have HR Cases for our Employee relations team that all on the team can view.  There are some that are assigned to our corporate users team that I'm trying to restrict to only those with that role.

Here is what I have for the business rule:

Any idea on what I could be missing?

Only want users with the sn_hr_core.hr_er_rsc role to view cases assigned to HR Employee Relations - RSC.