Restricting Access to Incident Records based on Role and Business Service

[RakshithaM]

Hi All,

I have a requirement to restrict access to particular incident records based on Role and Business service.

The incidents created from "Payroll Issues" record producer must be visible only for the users having Role- ( payroll + itil ) and having Business service as "Payroll Issues". 

And the " itil " role users must not be able to see this record in incident record list and it must be restricted.

But the below code in ACL isn't working as per requirement. Can someone guide me where I need to correct. Thanks in advance.

Incident Read ACL:

Script:

(function() {

    var salaryBS = '27d3f35cc0a8000b001df42d019a418f';     //sys_id of "payroll issues" Business service

    if (current.business_service != salaryBS) {

        return gs.hasRole('itil');

    }

    if (current.business_service == salaryBS) {

        return gs.hasRole('itil') && gs.hasRole('payroll_issue');

    }

    return false;

})();

[RakshithaM]

Hi @Ankur Bawiskar,

It's not working as expected. The above BR is hiding all the incident records for itil role users, irrespective of Business Service. For users having payroll role - incidents generated from "Payroll issues" record producer only must be visible. And for itil role user's incidents generated from "Payroll issue" record producer should not be visible.

Thankyou.

[Ankur Bawiskar]

@RakshithaM 

so what debugging did you do and what script you enhanced?

[AndersBGS]

Hi @RakshithaM ,

Have you looked into data security filters instead: https://www.servicenow.com/docs/bundle/yokohama-platform-security/page/administer/security/concept/s...

[svirkar420]

Hi @RakshithaM , Did my solution help if not then is your requirement fulfilled, Please let me know how?

Regards,

Saurabh V.

[RakshithaM]

Hi @svirkar420 , it's not working as expected yet.

Thankyou.