When a user has all three template roles (template_editor, template_editor_group, and template_editor_global) they are not able to edit templates that they should have access to in some situations.

The problem is a pair of extra "return false;" statements in the sys_template write ACL:
/sys_security_acl.do?sys_id=8f3271b2c0a8016501fab9eb78d21e95

 

1. Grant an ITIL user the following roles:
   • template_editor
   • template_editor_group
   • template_editor_global
2. Create a template that is global, but has no user or group.
3. Try to edit the template.
   The template is read-only even though the user has the template_editor_global role.

Import the attached XML file to fix the Access Control rule.