ACL Configuration

[jkelvynsant]

Hello, I created this ACL so that only users with the `hr_itil` role can see requests from the selected categories. However, even with this ACL, the requests are still visible to everyone.

[Kieran Anson]

Hi,

Allow If ACLs are additive. Your ACL won't override the OOTB ACL, it just grants an additional way to access the data. 

ServiceNow introduced Deny Unless ACLs which could potentially solve your issue. 

However, to point out, an ACL with a condition like this will have a performance impact 

[jkelvynsant]

Hello, so what would be the best way to handle this? 🙂

[Kieran Anson]

It looks like you're using the ITSM module to deliver HR capabilities? Be careful, SN licensing compliance may query this. 

Are these sc_req_item records all assigned to the same group? Can you remove the need of dot-walking and adding or conditions? A last resort would be to implement a new field on the sc_req_Item to capture that they should be restricted 

[jkelvynsant]

Hi, I consolidated the conditions into a single condition, but the view remains available to all users. 

Here: