SNOW-CSA Application Rules, ACL and Notifications — All Questions With Answers

Refer to the exhibit.

```
Business Rule: "Set Priority"
Table: [incident]
When: before
Order: 100
Condition: current.category == 'database'
Script:
(function executeRule(current, previous /*null when async*/) {
    if (current.state == 1) {
        current.priority = 1;
    }
})(current, previous);
```

ACL: "Incident Read"
Type: record
Operation: read
Name: incident.*
Role: (empty)
Condition: current.assignment_group == 'a1b2c3d4e5f6g7h8i9j0k1l2'
Script: (empty)
Requires role: true

Refer to the exhibit.

```
Notification: "Incident Created"
Table: incident
When to send: 
  - Condition: State changes to 'new'
Who will receive: 
  - Recipients: Assigned user
  - Also send to: Caller
Email template: (none)
```

A user creates an incident via self-service portal. The incident state is set to 'new'. The assigned user is empty. The caller is the user. The notification is active.

(function executeRule(current, previous /*null when async*/) {
    if (current.state == 3) {
        current.comments = "State changed to resolved";
        current.update();
    }
})(current, previous);

(function evaluateRule(current, user) {
    if (current.caller_id == user.sys_id) {
        return true;
    }
    return false;
})(current, user);

(function evaluateRule(current) {
    return current.state == 2 || current.state == 3;
})(current);

sys_security_acl table record:
name: incident.write
operation: write
type: record
condition: gs.hasRole('admin') || gs.getUser().getDepartmentId() == current.caller_id.department

Script debug output:
*** Script: gs.hasRole('admin') -> false
*** Script: gs.getUser().getDepartmentId() -> 'IT'
*** Script: current.caller_id.department -> 'Finance'

Notification 'Incident Assignment' configuration:
Table: incident
When to send: Record inserted or updated
Condition: state changes AND assigned_to is not empty
Who will receive: Assignment group
Email template: incident_assigned

sys_trigger record:
name: Notification - Incident Assignment
next_action: 2023-01-15 14:00:00
state: waiting
document: sys_notification_trigger

ACL Rule: incident.*
Name: incident.read
Type: record
Operation: read
Condition: gs.hasRole('snc_internal') || gs.getUserID() == 'admin'

Script debug:
gs.hasRole('snc_internal') returns false
gs.getUserID() returns 'john.doe'

User 'john.doe' is a member of role 'itil' only.

Application rule (Business Rule):
Name: Set Priority
Table: incident
When: before
Order: 100
Condition: current.state == 1
Script:
gs.log('Setting priority to 1', 'test');
current.priority = 1;
current.setWorkflow(false);

ACL on incident.priority:
Name: priority.write
Type: field
Operation: write
Condition: gs.hasRole('admin')

sys_notification table:
Name: Incident Update
Table: incident
When to send: Record updated
Condition: state changes AND active is true
Who will receive: Assigned user
Email template: incident_update

syslog: 
2023-01-10 10:00:00 - Incident INC001 updated: state from 'New' to 'In Progress', active remains true. Notification not sent.