Hi Bill

I agree with earlier comments that this, to me, looks like it will be a
performance killer.  Not only the LIKE scan on the assignee group field, but
the workflow to constantly scan children for permission changes, or push
from child tickets to their parents.

Field 112 Assignee Group is designed to be used to restrict access to data
rows to members of certain groups.  It is to stop unauthorized users seeing
data that they should not see, sensitive data etc.  This does not sound like
your scenario.

Your situation sounds like you are trying to reduce the lists of tickets
users see, not because the data is sensitive, but just to 'un-clutter' and
simplify their consoles. If that is the case, I would look for other ways to
achieve that aim.  I would reserve the use of field 112 to occasions where
the data has to be protected, such as HR data, etc.

So, say the aim is then to show the list of tickets by using appropriate
queries in your consoles.  Because of your requirement that any team that
has historically worked on a ticket should be able to see it, how about
creating a new table that has the ticket ID/form and the team name/ID that
should have access to it.  Each time the ticket is reassigned, push to this
form to create or modify a related ticket.  If the ticket is a child ticket
(has the parent request ID in a linking field), also create a record in this
form between the Assignment Team and the parent ticket ID.

You should then end up with records in this form listing all the teams that
should have access to a particular ticket, maintained by relatively simple
filter workflow.  Then, create a join form between this new table and your
ticket form (or consolidated ticket form) and use that as the source for
your console tables.  You should then be able to restrict the list of
tickets shown using table field queries that include what teams the user is
a member of.

Whether this will be easier to implement than the route you are taking I
don't know, but it is another possible approach to consider.

HTH

David Sanders
Remedy Solution Architect
Enterprise Service Suite @ Work
==========================
ARS List Award Winner 2005
Best 3rd party Remedy Application
 
tel +44 1494 468980
mobile +44 7710 377761
email [EMAIL PROTECTED]
 
web http://www.westoverconsulting.co.uk
 
-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of William Broderick
Sent: Monday, January 22, 2007 10:30 PM
To: [email protected]
Subject: How to start using field 112 after 200k rows

Please excuse this long post. I'm stuck and need another set of eyes. I 
have a feeling what I'm trying to do should not be as hard as it seems, but 
it's kickin' my butt right now. I need a sanity check on overall approach 
to do the following, and some advice on specific issues we are running 
into, before my head explodes.

Problem:  Management wants to change our security access model, including 
on existing 200k helpdesk records, including parent and child helpdesk 
records. Assignee Group field 112 has never been used here, but we now need 
to start restricting access according to the following rules:

1) On Submit - Login+ name, Submitted by Group ID, and Assigned Group ID, 
should be appended into field 112.

2) On Modify - If Assigned Group is changed, append new Assigned Group ID 
to 112 of Parent.  Also append new Assigned Group ID of Parent to field 112 
for any/all child tickets.

3) On Modify - If Login+ name is changed, add new Login+ to 112.

4) On Submit of Child Tickets - Append the Assigned Workgroup from the 
Child to field 112 for the Parent.

The tricky part seems to be keeping the parent and child 112 fields in sync 
so the parents can still see the children, etc even if the children have 
different Assigned Groups. Also, it seems tricky because it's an append and 
not just a simple push and replace, and we can't wipe out what was there in 
112, but must add to it.

What I've Tried:  First, for the 200k historical records, if I understand 
field 112 functionality, I'm thinking we can run an escalation to look up 
the Group ID from the Group table for existing records and put the Group ID 
into field 112. Then hopefully our reports will still work.

For new submits, I'm thinking we can have filters append Login+ name, look 
up submitter Group ID and Assigned Group ID and append these to 112. As I 
understand it, we can use a " ; " delimiter and concatenate to do this.

For submit of child tickets, I was thinking I could send an event and use 
an active link guide that refreshes the child table field on the parent, 
loop through the table field, get all the child group ids, and append them 
to the parent field 112. But this isn't working like I thought it should. I 
can't get the table refresh to fire in the right sequence. The log shows it 
doing everything else, then refreshing the table. Which is too late for my 
purposes.  Interestingly, if I manually click on the table field and 
refresh it, the lookups and appends seem to put everything into 112 ok. But 
I can't get it to work automagically.

I tried Remedy Support, and they were unable or unwilling to help, but 
instead referred me to this list... Hmmm. Has anyone ever been in this 
situation? Am I missing something obvious to anyone? I tried putting the 
table refresh in a separate active link with a lower execution order, but 
still no luck.  How can I make an active link table refresh fire, then loop 
through to pick up the child group ids? I read about the `! trick for 
forcing filters to execute, but how can I force a table refresh from an 
active link? And does my overall approach seem on the right track? Forgive 
me if this is unclear, my brain is having a hard time with this one.

Thanks for any help you can offer.
Bill
OCC
Helpdesk 6.0
AR 6.3

____________________________________________________________________________
___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the
Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the 
Answers Are"

Reply via email to