How to disable delete button on requested item table for non-admin users

[PranathiChD]

Hi Community,

Currently, the Delete button is visible on Requested Item (RITM) records for users.

However, for the same users, the Delete button is not visible on other forms such as:

• Incident
• Problem
• Change
• Request
• Catalog Task

The Delete button is visible only on the Requested Item (RITM) form.

Requirement:
We want to hide the Delete button on the Requested Item form for all non-admin users, irrespective of their assigned roles. The Delete button should be visible only to users with the admin role.

We want this change to apply only to the Requested Item table without affecting the existing Delete button behavior on other tables.

Could you please suggest the recommended way to achieve this? 

Thanks in advance!

[Vishal Jaswal]

Hello @PranathiChD 

Using Browser's Developer tools, you will get to know the sys_id of Delete UI Action (57dc4c970a0a0b3400f8f0538d3faf94) as shown below:

As it is out-of-the-box (oob), you should see Condition as current. canDelete() which is calling ACL:

OOB ACL (sys_security_acl): Update the role to admin or based upon your use-case:

[Goran WitchDoc]

I think this is a good way of showing. But I would avoid doing a query where you search for the table name in description. That could give strange results. I would rather go to the table, right click on a column, select configure->security rules.

Then add a filter to only show ACLs with operation "Delete" and there you got the one for your table (name).

Click on it, set the roles you want to have access to delete functionality and update. Make sure you know how ACLs work before doing work like this, since you need to understand how they work and the bigger picture. Otherwise you can rip open security hole like there isn't any tomorrow.

//Göran
https://www.linkedin.com/in/goranlundqvist/

[AndersBGS]

Hi @PranathiChD 

Have you looked at the UI action configuration?

[Syed14]

You can edit RITM delete ACL and change its role to only admin.