Issue with Query Business Rule on Task Table Impacting Catalog Tasks and Approvals

[manojkin]

Hi Team ,

I’ve implemented a query business rule on the Task table (parent table) to restrict data visibility based on user group membership.
Scenario:
We have a specific user group that should have visibility into all task records. For users not in this group, records associated with that security group should be hidden.

Issue:
After applying this business rule:

• The "Create Catalog Task" step in Flow Designer fails to execute.

• Approvals are also failing with the following error:
  Record being approved (sc_req_item:) does not exist or is unreadable.

It seems the query business rule is interfering with record visibility in a way that prevents these actions from functioning correctly.

Can someone please assist with adjusting the business rule logic or suggest an alternative approach to meet the requirement without impacting catalog task creation and approvals?

business Rule :
condition : !gs.getUser().isMemberOf('security')&&gs.getSession().isInteractive();
script : 

current.addEncodedQuery('assignment_group!=616bd6731bb48254b43ccbf3604bcbf7^ORassignment_group=NULL');

[Maik Skoddow]

Hi @manojkin 

this generic requirement makes no sense. The task table is the parent for most business-related tables in the platform and whenever you add new functionalities or products to your instance your Business Rule will break them.

So it's quite normal to narrow down your restricting functionalities to the tables you are dealing with and not to change the behavior of the complete platform.

Maik

[manojkin]

Hi @Maik Skoddow ,

The requirement is when any ticket (Req, RITM , sc_task, incident ) is assigned to security group. it should be restricted from others. 
Thanks in advance !

[Maik Skoddow]

Hi @manojkin 

okay, in that case, you have a fixed list of table you want to apply the Business Rule on. You can configure these tables as an additional condition in your existing Business Rule on the task table!

Maik

[manojkin]

Hi @Maik Skoddow 

i tried to add the condition but it is not working 

(function executeRule(current, previous /*null when async*/ ) {

    gs.log("line 3 class name " + current.sys_class_name, "querybr");

    if (current.sys_class_name == "incident" || current.sys_class_name == "sc_request" || current.sys_class_name == "sc_req_item" || current.sys_class_name == "sc_task") {  current.addEncodedQuery('assignment_group!=616bd6731bb48254b43ccbf3604bcbf7^ORassignment_group=NULL');

    } else {

        gs.log("testing else " + current.sys_class_name, "querybr");

    }

})(current, previous);


even i tried with this as well 

getting this error 
Record being approved (sc_req_item:e221372ffb752e509714f2cf55efdc87) does not exist or is unreadable