How can I restrict roles for Create Outage?

[David Sloan]

I want to restrict who can create outages. I was able to remove Outage from the navigation menu by changing the role for outages under System Definition > Modules, but users can still Create Outage from the Additional Actions menu on an incident. I would like to remove that option from that menu, but I would also like to remove the ability of a user to create an outage from anywhere if they do not have a particular role. I went into the UI Action "Create Outage" and set Requires Role to my desired role, but I was still able to impersonate a user without that role and create an outage from the incident form's menu. How can I totally eliminate the ability to create an outage from a user without this particular role?

[Brian Lancaster · Accepted solution]

You would have to modify that ACL's on the outage table so that only user with a particular role and Create / Write to the table.