Setting permissions on variables correctly

[Casey23]

In one of our catalog items, we want to set the read permission on the variables so that only our payroll group can see the data after the request is submitted. However, we also need to make sure that when a customer is submitting the request, that they can see it too. I'm wondering what the best way is to accomplish this is?

[Saurav11]

Hello,

So basically you want to have two different read rules one for Catalog item view and other for the RITM and task. You can do the below:-

Create two Catalog UI policies:-

One for the rules you want to apply on Catalog item, and keep the applies on catalog item view as true

And other which you want to for RITM and Task for that keep the other two checkbox true:-

Please mark my answer correct/helpful based on Impact.

[Casey23]

Thank you for the reply. However, I thought that using UI policies only visibly hides the data on the form but is still searchable in the dev tools of the browser? Because the data is sensitive we were trying to use ACLs or the variable permissions to keep it hidden except for the submitting party and the fulfillers on the back end.