Hiding HR Services from certain groups in case creation?

[jcmings]

I have the services A, B, C, D, and E in my system, spread across multiple Centers of Excellence. I have Group1, which should be able to create cases in services A, B, C, and Group2, which should only be able to create cases in services in C, D, E. 

What is the best way to limit Group2 from seeing HR services A & B in the case creation dialog? CoE Security Policies do not block the HR service from appearing in that list. HR Criteria on the HR Service only key off the subject person.  Must I use a query BR? This approach is not super scalable.

Thanks.

[Samaksh Wani]

Hello @jcmings 

You need to use Read ACL for the table and in the ACL you need to use script regarding the HR Service.

Plz Mark my Solution as Accept and Give me thumbs up, if you find it helpful.

Regards,

Samaksh

[jcmings]

Creating a conditional Read ACL on the HR Service table seems like a little much. This would require me to write a script on the AC record that has to get updated with every new Group and HR Service in the system. Why would this be the route over a Query BR?

[Samaksh Wani]

Hello @jcmings 

This is the case of Data Security in HRSD, which is properly managed by ACL Table level control.

where you can wind up them with the different HR Services where the respective agents of HR Service will see their relatable table and not of others.

Plz Mark my Solution as Accept and Give me thumbs up, if you find it helpful.

Regards,

Samaksh

[umaaggarwal]

Hi 

I would use client script g_form.addOption method to add values based on a check if user is member of a group or not. 

This check would need to use glideAJAX on onload client script to return true or false based on group membership.

If answer is true, add all the values using g_form.addOption , if fasle add required values only

Please mark this helpful if it really does.