How does the "available for" of a "catalog item" work?

[Lisa71]

I see even the "available for" of the catalog item is empty, we still can access the catalog item. Why? 

Also, where to view the backend code for the catalog item access restriction?

[Eshwar Reddy]

Hi @Lisa71 

The "Available for" is typically used to specify which users or groups can see the item, but if it's empty and no others are defined, it defaults to allowing all users to see it

To view the backend code for catalog item access restrictions, Go to the left navigator and type "user_criteria.list"

Please mark this response as Correct and Helpful if it helps you can mark more that one reply as accepted solution

Thanks 
Eshwar

[Lisa71]

Thank you. Where is the code for restricting the permission? Is it via Business Rule or client script or ACL or what else? Thanks. 

[Eshwar Reddy]

@Lisa71 

You cannot use BR or ACL to restrict access to catalog items in the portal; I believe we can only restrict access using user criteria instead.

[Lisa71]

I mean, the access restricting works via sc_cat_item_user_criteria_mtom, then what's the backend code for checking the sc_cat_item_user_criteria_mtom to decide whether a user can access the catalog item or not?