OOTB script include "ImpersonateEvaluator" which cater the impersonation functionality. you just need to make some modification there.
i tried on PDI environment and restrict it by passing the "System Admin" sysid in if condition. if i am an admin and i try to impersonate the "System Admin" it will restrict me to do that.
eg:
var ImpersonateEvaluator = Class.create();
ImpersonateEvaluator.prototype = {
initialize: function() {},
type: 'ImpersonateEvaluator',
canImpersonate: function(currentUser, impersonatedUser) {
var userImpersonated = impersonatedUser.getID();
if(userImpersonated == '6816f79cc0a8016401c5a33be04be441')
{
return false;
}
else
{
return true;
}
}
};
