I have just discovered that "SCOPE" entries are logical ANDed to make them work; so for instance I had a role set to
"Manage Incidents" {Scope: Requester: --Requester-- | Assignee: --Assignee--}
However - it was only showing them incidents where they were both Requester and Assignee: where I had assumed it meant it would display incidents where they met either criteria (logical OR).
We need the facility to choose how the scope filter is applied; I now have TWO filter entries as follows:
"Manage Incidents" {Scope: Requester: --Requester--}
"Manage Incidents" {Scope: Assignee: --Assignee--}
Which makes the permissions list harder to read and more complex.
Please add the facility (like in another part of the tool which escapes me) of "All the conditions", "Any of the conditions", "Custom" (where you write your own Boolean expression like "A AND B OR C (AND NOT D)"