How to Restrict snc_internal users from accessing all the tables in ServiceNow?

Sujitha2
Mega Guru

Hi,

 

I have a requirement where we need to open up "snc_internal" user access to all the users, but still they should not be allowed to open up any tables in ServiceNow by tampering the URL. for eg.

 

User_1 has "snc_internal" role, will be able to access portal page submit requests etc. But if he/she tries to tamper the URL like this - "www.mydev.service-now.com/pm_project_list.do" should not open and show any records to that user. 

 

Work around : I have written ACL's to access the table for the user and wrote a Query BR. By doing this he cannot submit the request on Portal as he is unable to search that record. 

 

How can we achieve this? Thanks in Advance !!!

1 REPLY 1

Sandeep Rajput
Tera Patron
Tera Patron

You can try updating existing read *.* ACL and check the user's role in ACL's script, if the user only has snc_internal role then you can set the answer variable to false else set it to true.