Show all catalog items - allow access to some.

[SoloSNOWadmin]

This request has come up multiple times from individuals so I am trying to get ahead of the curve before it becomes a requirement. We have catalog items that only people in certain positions can see. We have groups with those people in it, and currently those catalog items are made "Available for" those people. However, what people are requesting is for us to show all the catalog items, but if you are not one of the people who are allowed to request it, deny them access somehow. Right now, since people can't see it, they assume it doesn't exist and so they submit an incident to get the request fulfilled or try to manipulate a catalog item they can see to fit their needs. 

Any suggestions?

[Elijah Aromola]

Have you considered creating a general, catch all request for ones that aren't available to them?

Please mark this as helpful if it resolved your issue.

[SoloSNOWadmin]

Well, yes... but the point is that they aren't allowed to request it, so why would we allow them to request it through a different means? We want to let them know that there are only certain designated people who can request these types of items and they have to go through their appointed rep for that.

[Elijah Aromola · Accepted solution]

You could give access to everyone and write a catalog client script that checks if they're X group(s). If they're not, hide all the fields and show a message stating they need to reach out to their rep. 

[SoloSNOWadmin]

I am definitely willing to entertain this idea. I have been experimenting with different codes but can't get anything to work. I need to check group membership via the onLoad script as different catalog items are available to different groups so a business rule won't work, and I need to check multiple groups for the same catalog item. Also, ideally, I'd like to hide the submit button if the user is not a member of any of the "allowed" groups, but I haven't been able to identify a code that works for that either.