Adding ACLs To The Incident And Change Variable Editor

Out of the box, comes two very useful formatters:

Incident Variable Editor
Change Variable Editor

For those who haven’t used them (probably a very very limited few I’m guessing), these formatters display the variables which were submitted with the form.

When configuring security for the system, I wanted to hide the variable editor using ACLs and use the same logic as securing the rest of the form. The issue is however, ACLs cannot be applied to formatters (that bugs me a little bit but oh well, a topic for another day 🙂 ).

So digging into it a bit deeper, I found a very easy (and out of the box’ish) solution for it…
Continue reading