Show incidents assigned only to a specific group

[New user1212]

Hi.
I want to give users belonging to the XYZ group access to all requests and some incidents, but only to the group to which they belong. I added the roles sn_incident_read, sn_incident_write, sn_request_read, sn_request_write to the entire group, but I have to somehow limit the visibility to these specific group incidents.
ACL is not an option because developers do not get the admin_security role and I cannot create new ones.
I tried to create a BR, but after impersonating it as a user, I still have access to all incidents.
Any ideas?

[Dr Atul G- LNG]

Hi @New user1212 

BR are not good option here, ACL is best and you can tell to client the benefits for same.

@Community Alums correct , If am I wrong.

[tharun_kumar_m]

Hi @Dr Atul G- LNG ,

There are situations where an incidents with specific assignment group(s) to restrict visibility only to it group members. Though this can be achieved using read ACLs, but it may force restricted users to get access through other read ACLs or OOB readACLs on that table.

Since it is not suggested to disable other ACLs, we can restrict incidents of specific group from visibility via before-query business rule.

If my answer has helped with your question, please mark my answer as accepted solution and give a thumbs up.

Best regards,

Tharun Kumar

[Dr Atul G- LNG]

Thanks mate for update and clarification. Agree with you. 

[tharun_kumar_m]

Hello mate,

In the "When to run" tab, instead of Insert and update, please select only the "query". 

Your code script should run on before query and not on on before insert/update.

If my answer has helped with your question, please mark my answer as accepted solution and give a thumbs up.

Best regards,

Tharun Kumar