Hi All,
I have a requirement to allow two flows to run after Security Incident is Closed or Cancelled. Those flows are custom and are needed for integration with 3rd party system which will send our Closed and Cancel state to them. We have identified that there is BR and Script Include called by this BR that is dropping all flows if SI is being set to inactive. We have copied and modified those OOB BR and Script Include to exclude our two custom flows and that's working pretty fine for Closed state synch. For Cancel on Classic UI it is also working fine, as we were able to identify UI Action for Cancel button in Classic UI which was calling the same Script Include. Problem is with identifying where is Workspace button hiding this option for me to edit. I found Declarative Action responsible probably for that called "cancel" on sn_si_incident table, but still can't localize the script that is being triggered on action when clicking "Cancel" on a Workspace.
