Read, write and report ACL will be created for assignment group type= IT Service

[Pratiksha KC]

I wants to create a Read, write and report ACL  for assignment group type= IT Service, Exception: Admin

When agent selects any other Category/Subcategory, but the ticket is assigned to a group of type: IT Service, the ticket should ONLY be visible for members of groups that have type: IT Service.

I have created a read and write ACL: incident.*

script - 

answer = false; // Deny by default

// Always allow admin

if (gs.hasRole('admin')) {

  answer = true;

}

else if (current.assignment_group) {

  var group = current.assignment_group.getRefRecord();

  if (group.isValidRecord()) {

        if (group.getValue('type') == 'fb1b6d20c3612e1052a8f8bc7a01315c') {

      var gr = new GlideRecord('sys_user_grmember');

      gr.addQuery('user', gs.getUserID());

      gr.addQuery('group.type', 'fb1b6d20c3612e1052a8f8bc7a01315c'); // sys_id of type- IT service

      gr.query();

      answer = gr.hasNext();

    } else {

      answer = true;

    }

  }

}

[Chaitanya ILCR · Accepted solution]

Hi @Pratiksha KC ,

use deny Unless type acl or query BR for this

deny unless acl 

replace itil with it services in the condition

script

answer = gs.hasRole('admin') || gs.getUser().isMemberOf(current.getValue('assignment_group'));

Please mark my answer as helpful/correct if it resolves your query.

Regards,
Chaitanya

[Ankur Bawiskar]

@Pratiksha KC 

so what debugging did you perform?

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Pratiksha KC]

Hi @Ankur Bawiskar 

Not able to achieve the goal. 

Even if I assigned the incident to group who have that type, it is still accessible for all the user.  

[Ankur Bawiskar]

@Pratiksha KC 

so which ACL is allowing the access?

Any other ACL?

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Pratiksha KC]

@Ankur Bawiskar 

OOB ACL for incident table.