ACL - Allow write to Incident if member of the assignment group (and not parent assignment group)

[David Harris1]

I have setup and ACL which allows write to any incidents for members of the assignment group it is assigned to.

They have read access to all other incidents.

The only problem is that they also have write access to incidents assigned to the parent assignment group of the one they are assigned to.

How do I modify it to allow 'Only' to incidents assigned to the group they are in?

[David Harris1]

Thanks but managed to get it working just before your replied using the following.

(function executeCondition() {

    var userID = gs.getUserID();

    var groupID = current.assignment_group;

    if (!groupID) {

        return false; // no assignment group

    }

    var gm = new GlideRecord('sys_user_grmember');

    gm.addQuery('user', userID);

    gm.addQuery('group', groupID);

    gm.query();

    if (gm.next()) {

        return true; // user is a member of the assignment group

    }

    return false;

})();

[Ankur Bawiskar]

@David Harris1 

Glad to know.

I believe I also shared the correct solution.

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Ankur Bawiskar]

@David Harris1 

Hope you are doing good.

Did my reply answer your question?

If my response helped please mark it correct and close the thread so that it benefits future readers.