Setting Field Level Security

Issue #465 resolved
Stephen Miller created an issue

I have created a Release Approval issue type to capture release signoffs that can be shown to auditors to prove the production release was approved. Everyone should be able to view the issue but the approval signoff field should only be able to be updated by members of a selected group. Here is a general idea of what I need:

Fields:
Field 1 - Business Process Owner (Select List (single choice – list of groups) Field 2 - Business Process Owner Signoff (Select List (single choice – Approved / Deny))

Is it possible to set security at the field level for Field 2, where only members of the group selected in Field 1 can update Field 2?

Comments (2)

  1. Fidel Castro Armario repo owner

    Hi Stephen,

    You can do it using the following solution:

    1) Remove field "Business Process Owner Signoff" from EDIT screen, keeping it on VIEW screen.

    2) Create a screen called "BPO Signoff" and add field "Business Process Owner Signoff" to it.

    3) Create a global reflexive transition called "Set/Edit Business Process Owner Signoff". A global transition is available from any status, and a reflexive transition has the same origin and destination status. The following screenshot shows how to create these kind of transitions.

    4) Associate screen "BPO Signoff" to "Set/Edit Business Process Owner Signoff" transition.

    5) Add Boolean condition with math, date-time or text-string terms condition to transition "Set/Edit Business Process Owner Signoff" with the following boolean expression:

    isInGroup(%{00020}, %{nnnnn})
    

    replacing nnnnn with field code for Business Process Owner custom field.

    Note that %{00020} is field code for Current user.

  2. Log in to comment