Restrict itil role to view only request s they submitted for a specific catalog item.

Tracey6 · ‎10-25-2022

Hello - I have a specific catalog log item that I need to restrict users with the itil role to view only requests they submitted. I've tried created and read ACL on the sc_request_item as well as a business rule and nothing works.

I was able to restrict read access, but it also restricts them from submitting their own request.

Thank you in advance for your help!

See screen shot

Brad Bowman · ‎10-26-2022

Inactivate the Business Rule, as I don't see what that could possibly be adding/effecting in this scenario. On the ACL, you have a heck of a lot of conditions. Are all of these really necessary? If you deactivate the ACL, can you submit a new request? Once you can do this, activate the ACL with one condition at a time - so start with isNewRecord only, and you should be able to read and write. Once this is working, add the necessary conditions to be able to read existing RITMs if the current user was the submitter - but this should be one condition - whatever on the RITM matches the current user. You'll also want to add a condition for this Catalog Item only, so this doesn't apply to every RITM/Catalog Item.

View solution in original post

Tracey6 · ‎10-27-2022

Thank you, Brad, I'll give you suggestion a try.

Tracey6 · ‎10-27-2022

Thank you so much Brad!! I followed exactly what you suggested and finally seeing the results I need to see.

Brad Bowman · ‎10-28-2022

That's great. You are welcome!