Good morning,

I'm working on something that has been discussed by others here but I'm having 
trouble conceptualizing how I can do this.  The user's requirement is to track 
confidential Incidents in ITSM.  This is defined by setting a flag of some sort 
(I'm debating making it either a custom field or an Operational Category) which 
will trigger a lock down to remove read access from all but the Assigned Group 
on the Incident (who will also be the Incident Owner Group in this scenario.)

To do this, I was thinking about creating a custom field, with a Field ID of 
60700 or something.  Would I then set a default to be the same as the Assignee 
Group (7) as well as the Unrestricted Access Role, then when the flag is 
checked just remove the ID of the Unrestricted Access Role?  What would I do to 
the Request ID field to make it work on combination with this new field to 
restrict visibility into the Incidents?  It seems pretty straight forward to 
create a new field and give change access to a group that has read only access, 
but I'm struggling to come up with a good way to lock things down.

Also, using multi-tenancy isn't an option, unfortunately.  There are a lot of 
legitimate reasons, as a shared service organization, that we have many people 
with Unrestricted Access.  It seems to be required to make SRM work without 
creating dozens of the exact same things for each division.  Another thing that 
will be a factor is that we use BMC Analytics for reporting.  Based on how it 
handles security, we'll have to be very careful to ensure these don't show up 
on reports either.

My backup plan is going to be to build a custom form that can be fully locked 
down in the way that I need, and integrating that with Incident Management.

Thanks,

Shawn Pierson
Remedy Developer | Energy Transfer


Private and confidential as detailed here: 
http://www.energytransfer.com/mail_disclaimer.aspx .  If you cannot access the 
link, please e-mail sender.

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
"Where the Answers Are, and have been for 20 years"

Reply via email to