HOw to get the Description field only editable by the user who create the incident

[User687957]

Dear all,

I have a use case where I need to get the desciption field of an incident only editable by the user who create the incident. This from the self service view

For that I have created a incident.description ACL rule where I have add a script as below in advance section:

answer = (current.getValue('sys_created_by') == gs.getUserName());

When I login to an other user who did not create the incident, the description field is still editable

Any idea ?

[Sachin_Nasa]

Hi @User687957 ,

There are several OOB write ACLs configured for the Incident table and Description field.
Because of that, the custom ACL may not be restricting access as expected.
Could you please update the ACL Decision Type from 'Allow If' to 'Deny Unless' and test again using the same configuration and script? This will explicitly deny write access to users who do not meet the ACL condition. Please let me know if the issue still persists after making this change.

[User687957]

This does not work.
I am login as system admin and open by user for the incident is not admin so description should normally be read only but in fact not

Any  other idea ?