Control owners should only be able to see controls which they are owner of

[AjvadK]

I want control owners (entity owners) to have visibility to controls they are owner of. I have granted they sn_grc_business_user_lite role. But now they have visibility to all the controls in the system. What is the best approach to limit their visibility to only controls they are owner of?

[Ankur Bawiskar · Accepted solution]

@AjvadK 

you can use query business rule.

Example: on incident table I should see only those incidents raised by me, so I will create query BR on incident with this script

current.addQuery('opened_by', gs.getUserID()):

So something similar you can also have if you have owner field as reference to user table on your Controls table

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[Ankur Bawiskar · Accepted solution]

@AjvadK 

you can use query business rule.

Example: on incident table I should see only those incidents raised by me, so I will create query BR on incident with this script

current.addQuery('opened_by', gs.getUserID()):

So something similar you can also have if you have owner field as reference to user table on your Controls table

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[Dhanraj B · Accepted solution]

Hi @AjvadK ,

You can use simple Before - Query business rule in designated table, something like below.

current.addQuery("owner", gs.getUserID()).

This will allow the users to view only the records they own.

-Dhanraj.