ACL for sc_request table field: Requested for

[ajlabate]

When a user is submitting a request from the Service Catalog, I present them with a variable field that is pre-populated with them as the requester.   They have the ability to enter a different valid name if they are submitting it for someone else.   When I test this it works fine, but that's because I am an admin.   I'm trying to figure out how to make that field in the sc_request table editable by anyone (even users).   I created an ACL for the field with no conditions and no script.   I just added the user role to be able to execute, create, or write.   However, this does not work.   Can someone tell me what I need to do to make this work so that anyone submitting a request from the catalog will have the ability to overwrite this field?

[ajlabate]

The variable is displayed on the task.   I want the table field to be overwritten with the variable.   This works fine when I'm testing as an admin.   But when a non-Admin tries (e.g. itil user) it does not over write the field.

[Jake Gillespie]

Hi Anthony,

To clarify, you cannot use ACLs to control variables. They only work on table fields. If I understand your question correctly, you want a non-admin user to be able to change the "Requested For" reference field on the Checkout screen? I believe that non-admin (any ESS user for that matter) should be able to change this in standard (unchanged) Dublin instance. Are the non-admin users able to change the field but the value is not saved? In any case I think an ACL is preventing the non-admin users from changing the value to a user other than themselves. Try checking which ACLs are currently configured on the Request (sc_request) table and the Requested For (requested_for) field. The following Wiki article may help with clarification of rule processing orders etc.

Using Access Control Rules

Regards,

Jake

[ajlabate]

I can't find any ACLs affecting this.

[ajlabate]

I turned on the debugger, and this is the error the non-admin user gets...

08:46:09.940: TIME = 0:00:00.000 PATH = record/sc_cat_item_guide.name/read RULE = ((((hasRole(catalog_admin) )) SEQ ((hasRole(catalog_admin,public) )) SEQ ((hasRole() AND script=gs.hasRole('admin') || gs.getProperty('glide.sm.default_mode') == 'allow') OR (hasRole() AND script=var ra = false; if (root_rule.substring(0,7)=='var__m_') { var wa = gs.getUser().hasRole('workflow_admin'); var wc = gs.getUser().hasRole('workflow_creator'); var fn = gs.getUser().hasRole('normalizer'); if (wa || wc || fn) ra = true; } ra; ) OR (hasRole() AND script=typeof g_approval_form_request != "undefined" && g_approval_form_request == true;))) AND (((hasRole(public) )))) RC = false

Here's the sc_cart error from the debugger:

10:13:52.762: TIME = 0:00:00.000 PATH = record/sc_cart.current_crumb_history/write RULE = ((((hasRole() AND script=var answer = true; answer;)) SEQ ((hasRole() AND script=gs.hasRole('admin') || gs.getProperty('glide.sm.default_mode') == 'allow') OR (hasRole() AND script=var ra = false; if (root_rule.substring(0,7)=='var__m_' || root_rule == 'wf_workflow.vars') { ra = gs.getUser().hasRole('workflow_creator') || gs.getUser().hasRole('normalizer'); } ra; ))) AND (((hasRole() AND script=var answer = true; answer;)))) RC = false

[Ivan Martez]

The Requested For on the sc_request gets populated from the user field on the sc_cart table. Once a request is submitted that info is passed to the newly created Request. What you mat want to consider is running a client side script that changes the user field on the sc_cart. For example, if I have a variable called "Requestor" on a catalog item. I can change that variable to someone else and it will update the sc_cart record, this way, when I checkout, that field is already updated with the new value and the request will be as well. Here is how I did it.

Script Include:

var CartUtilityAjax = Class.create();

CartUtilityAjax.prototype = Object.extendsObject(AbstractAjaxProcessor, {

  setRequestedFor: function() {

  var user = this.getParameter('sysparm_catalog_user');

  var reqFor = this.getParameter('sysparm_requested_for');

  var cart = new GlideRecord('sc_cart');

  cart.addQuery('user.sys_id', user);

  cart.query();

  if (cart.next()) {

  cart.requested_for = reqFor;

  cart.update();

  }

  }

});

Catalog Client Script:

function onChange(control, oldValue, newValue, isLoading) {

  if (!isLoading) {

  var userid = g_user.userID; //Logged In User

  var newid = g_form.getValue('dl_requested_for'); //Replace with your variable

  var gac = new GlideAjax('CartUtilityAjax');

  gac.addParam('sysparm_name', 'setRequestedFor');

  gac.addParam('sysparm_catalog_user', userid);

  gac.addParam('sysparm_requested_for', newid);

  gac.getXML();

  }

}