Try below code in Read ACL if this doesn't work try Query business and check access Analyzer to understand which ACL is providing the access to the user.

gs.getUser().isMemberOf(current.assignment_group) && current.assignment_group.group_type == 'IT Service'

Using Access Analyzer

If my response helped, please mark it correct and close the thread so that it benefits future readers.