Script ACL

[Pastupe]

Hello

Im getting lost in scripting ACL

What I need is to create ACL where:

User can see only tickets where user is member of group to which ticket is either assigned or watchlisted

Anyone know how to do it?

With the below script Im not getting correct results for READ ACL.

See it below, it should give me back 6 records to read and it giving me back just 3, why ?

please help

/Petr

[Pastupe]

As well I have just 1 ACL that we now work with

[Chuck Tomasi · Accepted solution]

As noted before, try it with one ACL criteria and two ACLs. Debug the one to determine group membership first. Test it, get it working, etc. If someone comes along later and says "No, we don't need that" it's a simple matter of deactivating it rather than modifying code. Don't pile both bits of logic in one ACL.

ACL 1:

answer = gs.getUser().isMemberOf(current.u_assignment_group.getDisplayValue());

ACL 2:

var result = false;

var list = current.u_support_team_involved.toString().split(',');

for (var i = 0; i < list.length; i++) {

        var grp = new GlideRecord('sys_user_group');

        grp.get(list[i]);

        if (gs.getUser().isMemberOf(grp.getDisplayValue()) {

                  result = true;

                  break;

        }

}

answer = result;

[Pastupe]

Chuck, If I test with just one, first one you provided, it still gives back not correct results.

2 out of 5 with new ACL 1 below

/Petr

[Ulrich Jugl]

Can you check if the "HR Global" group you are referencing is unique? What I mean is: is the sys_id of all the HR Global groups in sys_user_group the same or is this some kind of duplicate?

[Pastupe]

It looks like to be unique, just one group has been returned