Modifying Close action on Security Incident Workspace

artur3 · 4 weeks ago

Hi All,

I have a requirement to allow two flows to run after Security Incident is Closed or Cancelled. Those flows are custom and are needed for integration with 3rd party system which will send our Closed and Cancel state to them. We have identified that there is BR and Script Include called by this BR that is dropping all flows if SI is being set to inactive. We have copied and modified those OOB BR and Script Include to exclude our two custom flows and that's working pretty fine for Closed state synch. For Cancel on Classic UI it is also working fine, as we were able to identify UI Action for Cancel button in Classic UI which was calling the same Script Include. Problem is with identifying where is Workspace button hiding this option for me to edit. I found Declarative Action responsible probably for that called "cancel" on sn_si_incident table, but still can't localize the script that is being triggered on action when clicking "Cancel" on a Workspace.

Ondrej Bernat · 3 weeks ago

Hi Artur,

the problem with your solution is that you are customizing so much, just to achieve such simple goal like triggering some integration on state change. Yes, the flows associated with the SI are cancelled, but you can use async BR instead, trigger the needed sync logic and avoid all the work and unnecessary technical dept coming with your customizations.

If my response helped you, please mark it as Helpful & Accept the solution.

Best regards,
Ondrej Bernat

Ranjane_Omkar · 2 weeks ago

@artur3, Check the "Modal - Cancel Record" Page in UI Builder workspace.

Regards,

----
If this response was helpful, please select "Accept as Solution" and "Helpful." This helps both the community and me.

artur3 · 2 weeks ago

Thank you all. I have resolved that by using standard UI Action button for Cancel action on Workspace instead of configuring existing Declarative Action. That solved the issue.