ACL issue

[Vurukonda Sai 1]

ACL issue. 

I have create Read ACL on HR case table u_hr_case. 
i have created Group HR_CN and added 2 user in the group. when they open the HR case record All filed shoud be read mode like Read acces only. 

I have used below 3 codes 

// // // Allow users in the HR_Marelli_CN group to read HR Cases

// // (function() {

// //     var user = gs.getUser();

// //     if (user.isMemberOf('HR_Marelli_CN')) {

// //         answer = true;

// //     } else {

// //         answer = false;

// //     }

// // })();

// var gr = new GlideRecord("sys_user_grmember");

// gr.addQuery("user", current.u_caller_id);

// gr.addQuery("group", "fd665c24c36e62507ee9da4bb001310e"); //HR_Marelli_CN

// gr.query();

// if (gs.getUser().isMemberOf("HR_Marelli_CN") || gr.next()) //HR_Marelli_CN users should see tickets raised by their team members

//     answer = true;

//  (function() {

//     var userGR = gs.getUser(); // Get current user

//     return userGR.isMemberOf('HR_Marelli_CN'); // Only allow read if user in group

// })();


Kindly help me on this issue. 

[J Siva]

@Vurukonda Sai 1 Thanks for sharing the pic.

I can see that the above shared ACL is inactive.

[Vurukonda Sai 1]

I have activated

[Musab Rasheed]

Check if any existing ACL is impacting, use Access analyser to debugg, in meantime you can simply write below code and replace group name, this will make sure if user part of group then ACL is passed otherwise fail

answer = gs.getUser().isMemberOf('My HR Group');

[Chaitanya ILCR]

Hi @Vurukonda Sai 1 ,

create a denyunless write acl

replace incident with your table name

you can use security attribute Group Is not Your Group or script

answer = !gs.getUser().isMemberOf("HR_Marelli_CN") //update group name if required

Please mark my answer as helpful/correct if it resolves your query.

Regards,
Chaitanya

[Shraddha Kadam]

Hello @Vurukonda Sai 1 ,

Is there any existing ACL on these tables? May be existing ACLs are affecting

Thank you