Non-ITIL users can't see email addresses

[David Christian]

I have some catalog items that are a reference field to the sys_user table.   When I fill out the field I can see the persons name and email address.   However, non itil users type in that field they only see a persons name.   We recently had a case where two people had exactly the same names.   We need customers (non itil users) to be able to see email addresses on the drop down as they type in the name the same as I do.   How do I accomplish that?

[Brad Tilton]

There's a Read ACL on sys_user.* that locks down read access to all user fields on user records that are not the logged in user if the logged in user has no roles.

I think you would want to add another Read ACL, but on sys_user.email that allows read access to the field for all users.

[David Christian]

I was thinking it had to do with the ACL.   So far I have not had to mess with ACLs very much so I was hesitant to change anything on them just yet.   I did find the same record that you have however Out of the Box I do not have that same script you have and I do not have the * in the field right by the name.  

[Brad Tilton · Accepted solution]

Hi David,

That ACL is also there, but the one I showed was a different ACL. I've confirmed that it's present in both Fuji and Geneva instances I have access to. Try adding the following ACL and see if your users can see the email field.

[David Christian]

That did it.   I did also find the other ACL that you showed.   Thanks so much for your quick responses!