Workflow and ServiceDesk Community

 View Only
  • 1.  ServiceDesk 7.5 - mask SSN (in Rules?)

    Posted Dec 12, 2013 03:54 PM

    In Helpdesk 6 we use an Incident Rule to mask any Social Security Number (SSN), we blank them out with Xs - XXX-XX-XXXX, we were hoping we could accomplish something like this in ServiceDesk 7.5.    Anyone have a solution in Rules? smiley Or in the Workflow?  frown

     

    Here is our Incident Rule:

    Name: MASK SSN in E-mail Sent as Helpdesk Incidents
     
    Comment: This rule will REPLACE a SSN with 'XXX-XX-XXXX' in a ticket in e-mail or manually saved

    Set these properties:  Set "Comment" to "HDQUERY[[SELECT REPLACE ((Cast(Comment as nvarchar (max))),(SUBSTRING(Comment,PATINDEX('% [0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9][0-9][0-9] %', Comment) + 1, 11)),'XXX-XX-XXXX') FROM workitem with (NOLOCK) WHERE number = WORKITEM (workitem_number) AND is_last=1]]"

    When:  Every time incident is saved
     

    And:  When ALL of these are TRUE
       "Comment" matches regular expression "^(\d{3}-\d{2}-\d{4})|(\d{3}\d{2}\d{4})*$" 
    <end>

     

    Any help is appreciated.



  • 2.  RE: ServiceDesk 7.5 - mask SSN (in Rules?)

    Posted Dec 13, 2013 09:08 AM

    I don't have an exact solution at this point but I would think this is possible by sending or routing each incident to a specific workflow. How easy it would be might depend on how or where the SSNs are being received. If there are custom forms then you could mask it in the form assuming you don't need to ever see the information (so then why ask for it I suppose). Otherwise you'd have to somehow parse through the description looking for the pattern, break the description apart into variables, do work by masking the SSN and then merge the description back together. There might be other, more elegant ways to do this but this is what I'm thinking off the top of my head.



  • 3.  RE: ServiceDesk 7.5 - mask SSN (in Rules?)

    Posted Dec 13, 2013 09:16 AM

    Yes, looking to mask SSNs that are accidently sent in the body of an email that are harvested, when creating tickets.  We do it in Helpdesk 6 with an Incident Rule, just trying to find the most efficient way to do it in ServiceDesk 7.5.

    Or even a way to mask incident descriptions if it is in the SSN format, after creation.