question Need to write an ACL to allow only members of particular group to edit few fields in location table in ITSM forum

Need to write an ACL to allow only members of particular group to edit few fields in location table

Kayathri — Tue, 20 Jul 2021 06:44:16 GMT

Hi Team,

Having a requirement to write a ACL to allow only members of a particular group to edit three user defined fields in location table. Kindly suggest.

Regards,

Kayathri

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Anil Lande — Tue, 20 Jul 2021 06:49:22 GMT

Hi,

You need to create a Write ACL for the table_name.field_name. SO you need to create three ACL's for three fields.

In your ACL script you can check gs.isMemberOf('GroupName/Sys_id') to check whether user is member of particular group.

If user is member of group set answer=true else answer=false

Thanks,
Anil Lande

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Ankur Bawiskar — Tue, 20 Jul 2021 06:57:57 GMT

@Kayathri

As mentioned by Anil you can use 3 field level WRITE ACLs on individual fields.

If you don't want to create 3 ACLs then you can take Display BR + Client Script approach

Display BR: it would check if logged in user is member of particular group and store in g_scratchpad

onLoad Client Script: it would get the scratchpad variable value and based on true/false allow edit of those 3 fields on form

Regards
Ankur

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Kayathri — Wed, 21 Jul 2021 15:01:05 GMT

Hi Ankur,

I have the requirement that the three fields should be editable by the members of the particular group, so I have written a table level ACL to make that edit all the fields,3 field level ACLs also written, since only the members of those group should access those 3 fields, not other members. now I want to restrict the group members to edit only the three fields. Please suggest how it can be done.

Regards,

Kayathri

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Ankur Bawiskar — Wed, 21 Jul 2021 15:18:44 GMT

Hi,

so members of that group should be allowed editing only 3 fields

All others should be readonly

Do this

Display BR on your table:

g_scratchpad.isMember = gs.getUser().isMemberOf('Group Name');

onLoad Client Script:

function onLoad(){

	if(g_scratchpad.isMember.toString() == 'true'){

		// make all fields readonly
		var fields = g_form.getEditableFields();
		for (var x = 0; x < fields.length; x++) {
			g_form.setReadOnly(fields[x], true);
		}

		// make those 3 fields as editable
		g_form.setReadOnly('fieldA', false);
		g_form.setReadOnly('fieldB', false);
		g_form.setReadOnly('fieldC', false);
	}

}

Regards
Ankur

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Kayathri — Thu, 22 Jul 2021 10:10:35 GMT

Hi Ankur,

This is the BR I have used,

This is the onload script I have used,

but its not working as expected, kindly suggest.

Regards,

Kayathri

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Ankur Bawiskar — Thu, 22 Jul 2021 10:28:08 GMT

Hi,

did you add alert what came in client script?

Did you check any UI policy etc is making those 3 fields read-only?

Regards
Ankur

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Kayathri — Thu, 22 Jul 2021 11:17:59 GMT

Hi Ankur,

There is no UI policy for these 3 fields,

function onLoad() {
//Type appropriate comment here, and begin script below
if(g_scratchpad.isMember.toString() == 'true'){
alert('inside if');

// make all fields readonly
var fields = g_form.getEditableFields();
for (var x = 0; x < fields.length; x++) {
alert('inside for');
g_form.setReadOnly(fields[x], true);
}

// make those 3 fields as editable
g_form.setReadOnly('u_hot_site', false);
g_form.setReadOnly('u_hot_site_end_date', false);
g_form.setReadOnly('u_hot_site_reason', false);

}
}

Its going "inside if", but not "inside for".

Regards,

Kayathri

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Ankur Bawiskar — Thu, 22 Jul 2021 11:30:10 GMT

Hi,

I hope you are running this on native instance?

Regards
Ankur

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Kayathri — Thu, 22 Jul 2021 11:38:51 GMT

Sorry Ankur, I haven't given the role in ACL, that was my mistake, your code is perfect.

Regards,

kayathri

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Ankur Bawiskar — Thu, 22 Jul 2021 11:50:44 GMT

Glad to help.

Re: Need to write an ACL to allow only members of particular group to edit few fields in location table

Ankur Bawiskar — Thu, 22 Jul 2021 11:51:17 GMT

@Kayathri

Would you mind closing this question by marking appropriate response as correct

How to translate, None in Arabic, where None is OOTB

Regards
Ankur