Restriction for one assignment group for Request , RITM , TASK and Incident

[Manoj50]

I have a requirement to restrict Request , RITM , Task ,incidents assigned to group "Security" members.  Security group members should access only those Record other than  Security group remaining Record should be Visible

I tried  Query business Rule ,Can someone let me know what I am doing wrong because when I impersonate security member that data visibility party is working as expected , i am able to create record , but it associated Work Flow is not getting triggered , can some please Help me to achieve this Thank you in Advance

I tried the Below Query Business Rule in TASK[task] table which is parent table, It is working but while at the  time of record creation its related workflow is not getting triggered 

Thanks,

Manoj

[SunilKumar_P]

Hi @Manoj50, You can try with the before query business rule on the required tables.

Condition:

gs.getUser().isMemberOf('Security')

Script:

(function executeRule(current, previous /*null when async*/ ) {

    var grpQuery = 'assignment_group=2e959678939335104b7733ddfaba1084';

    current.addEncodedQuery(grpQuery);

})(current, previous);

Regards,
Sunil

[Manoj50]

Hi @SunilKumar_P 

In my requirement Request , RITM , Task , Incident all the records belongs to that group needs to be visible to that group only for other group it should not visible the data since i tried this script it is working but when we raise a request its following workflow is not getting triggered

Thanks, 

Manoj

var grpQuery = 'assignment_group=2e959678939335104b7733ddfaba1084';

    current.addEncodedQuery(grpQuery);

[Dr Atul G- LNG]

HI @SunilKumar_P 

Can we use sys id instead of group name?

gs.getUser().isMemberOf('Security')

 I am not  coder, but if we put group name that is not a good practice. or My understating is wrong 

[SunilKumar_P]

Hi @Dr Atul G- LNG, Thanks for raising this point. I have just tested it by passing the group sys_id instead of name and it works as expected.

@Manoj50, As a good practice, you can create a system property with the value as group sysid and call the systemtem property in the script.

gs.getUser().isMemberOf(gs.getProperty('security.group.sysid'))

Regards,

Sunil