Script on ACL of type processor

snowtech1
Tera Expert

Hello,

I have been trying to modify the availability of the email icon.

An acl which is always true works, makes it available for all users, but is for all tables.

I want to make it available only for one table. Is it possible to retrieve the table name from this acl?

current.getTableName() and current.sys_class_name don't seem to work.

find_real_file.png

ctomasi

Thanks in advance!

5 REPLIES 5

Pradeep Sharma
ServiceNow Employee
ServiceNow Employee

HI,




Users with write access to the current table can see the email icon. To remove the icon, remove the user's write access to the table. Typically you do this in one of two ways:


  • Make the user an Employee Self-Service (ESS) user. ESS users do not have a user role, and without a role they do not have write access to the Incident table. Making a user an ESS users, therefore, hides the email icon on the Incident form.
  • Create a custom ACL rule and user role that does not have write access to the table. The default ACL rule for the email client checks to see if the user has the itil role. If you grant users a custom role other than itil, then any such users will not see the email icon.

http://wiki.servicenow.com/index.php?title=Enabling_the_Email_Client#Removing_the_Email_Icon&gsc.tab...


Thank you for the reply.


On option 1, I think the write access to that incident table is necessary so that they can update the 'comments' field on their respective incidents


Thoughts?


Thanks for the update.


Take an example of incident table OOTB. Ess users will not have access to email icon. However they do have write access to update ONLY their own records.



Please let me know if you have any questions.


I have the similar requirement, Is it possible to restrict ACL type processor only for three tables with role "asset admin" instead of the default role "ITIL"

For example, I want to enable EMAIL option for following tables "catalog task", "asset task" and "problem" and it should be accessible for the users who have the role "ASSET ADMIN" only.?