ACL not working with condition builder

[jamhoe]

Hi All,

I am creating an ACL to restrict a user with a custom role to access and update Incident records.

I have tried to create a Read ACL rule with the following configurations:

However, if i tried to impersonate a user with a 'bu_itil' role, those 3 records does not display on the incident list.

I have also tried to script the condition but it is not evaluated when I checked it on the debug logs.

Maybe you guys can help me out on this . TIA.

[jamhoe]

Hi Amlan,

I have already edited the BR according to what you have provided.

You may check the screenshots below for reference of the result.

It is odd that when I accessed the ALL module of incident,it only displays records that has been created by the account.

In order for me to display the required records, I need to filter it first.

[amlanpal]

Hi Joe,

There is a type error in your script where you have used "if ((!gs.hasRole("itil") || gs.hasRole("bu_itil")) && gs.isInteractive())". Whereas you need to use the below line (type error is highlighted in Bold😞

if (!(gs.hasRole("itil") || gs.hasRole("bu_itil")) && gs.isInteractive())

As you have mentioned Incident All module displays only those records which were created by that account. And this is because of the typo error in the If Loop. Request you to modify that and give it a try.

I hope this helps. Please mark correct/helpful based on impact

[jamhoe]

Hi Amlan,

I have already change it:

the screenshot below is the result.

[amlanpal]

Hi Joe,

Can you please add 'bu_itil' role in the OOB ACL with the Description "itil role required to read incident records" and test again? By default only itil role is added there.

I hope this helps. Please mark correct/helpful based on impact

[jamhoe]

Hi Amlan,

I did what you told me and all incident records   were displayed.