Before Query Business Rule is preventing sc_task being created in Flow Designer

[Kev9]

Hi,

We've created 2 before query BR's on the sc_req_item table and sc_task table to restrict access to records to a specific group. The BR's work as expected but the Flow is failing to create sc_tasks.

If the flow runs as system user, no task is created.

If the flow runs as user who initiates session (with itil and catalog admin role) the first task is created but the subsequent one is not. The execution shows a "The requested flow operation was prohibited by security rules"

error

Any guidance appreciated

Kev

[Peter Bodelier · Accepted solution]

Hi @Kev9,

Add a condition to your Business Rules : gs.isInteractive()

This way only manual queries will be affected by the BR. Not queries executed by the system.

[Kev9]

Thanks Peter, worked perfectly.

[Ankur Bawiskar]

@Kev9 

you can try the approach mentioned by Peter

Do share us the update

[Amit Gujarathi]

HI @Kev9 ,
I trust you are doing great.
You can try the below setting in onbefore business rule to validate the conditions

(function executeRule(current, previous /*null when async*/) {
    // If the operation is from the Flow, allow it
    if (sourceIsFlow()) {
        return;
    }

    // Existing logic to restrict access for specific group
    // ...
})();

function sourceIsFlow() {
    // Logic to determine if the current operation is from the Flow
    // This can be based on user, context, or other criteria
    return gs.getSession().getUserName() === 'flow_user'; // Replace 'flow_user' with the actual system user for the Flow
}