ACL script not working on the table.

[Paul125]

Hi, I am using the below ACL script to give read access to the table records if the user is a group member of the selected CI on the record field(points to cmdb_ci). Also there is another read ACL exist on the same table with a require role. When I try to impersonate non-role, non-group member I can still see all records on the table. Don't know what's going on. Can someone assist me with correcting this? Thanks!

var ciArray = current.u_configuration_items.split(',');
for(i=0; i<ciArray.length; i++){
	var ci = new GlideRecord('cmdb_ci');
	ci.get(ciArray[i]);
	
	if(gs.getUser().isMemberOf(ci.support_group)){
		answer = true;
		break;
	}
}

[Paul125]

Ali, yes u_configuration_item is a list field. I tried this script I got nothing in the logs. 

Note: CIs that we select in field are resides in the child tables which are extended from cmdb_ci. I checked the logs in the background script with ci.support_group and I got group id.

[Ahmmed Ali]

Thats strange. atleast first log should have come

[Paul125]

I added this code to the ACL and impersonated with group user but I didn't see any rows. Then I impersonated back to my account and checked the logs but there was nothing. Please let me know if I am doing anything wrong. Thanks!

[Ahmmed Ali]

can you post screenshots of logs ?

Thanks,

Ali

[Paul125]

I apologize Ali. Here is the screenshot. I was looking in the wrong column for logs.