Acl on certain records

[AlekhyaD]

Hi,

Am trying to create a acl on cmdb for two records that should be editable by only by members of x group. Tried creating table level write acl and in condition filtering with sys id then in script checking for user is member of x group then answer is true else false. It is not working and if I write the acl on table.* It is making read only all other records also.

Any suggestions please.

[Dr Atul G- LNG]

Hi @AlekhyaD 

I think no need to write a script, you can use OOTB way in ACL, is member if condition.

[Ankur Bawiskar]

@AlekhyaD 

Ensure you handle it in this way

1) create new table.None WRITE ACL with condition as SysId IS ONE OF 2 SysIds

In script check group membership

2) create new table.* WRITE ACL with condition as SysId IS ONE OF 2 SysIds

In script check group membership

3) Ensure any existing table.None and table.* WRITE ACLs work for other records so exclude the 2 sysIds from condition

SysId [IS NOT] SysId1

AND

SysId [IS NOT] SysId2

If my response helped please mark it correct and close the thread so that it benefits future readers.