How to Restrict snc_internal users from accessing all the tables in ServiceNow?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-16-2023 09:26 AM - edited 11-16-2023 09:26 AM
Hi,
I have a requirement where we need to open up "snc_internal" user access to all the users, but still they should not be allowed to open up any tables in ServiceNow by tampering the URL. for eg.
User_1 has "snc_internal" role, will be able to access portal page submit requests etc. But if he/she tries to tamper the URL like this - "www.mydev.service-now.com/pm_project_list.do" should not open and show any records to that user.
Work around : I have written ACL's to access the table for the user and wrote a Query BR. By doing this he cannot submit the request on Portal as he is unable to search that record.
How can we achieve this? Thanks in Advance !!!

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-16-2023 11:02 AM
You can try updating existing read *.* ACL and check the user's role in ACL's script, if the user only has snc_internal role then you can set the answer variable to false else set it to true.