Need to restrict end users access to backend forms access using direct links?

[micky09]

Expected Behaviour:

If a user with no role trying to access a direct link for Incident creation it should redirect the user to Portal View.

Current Behaviour:

It is allowing users who uses direct link to create Incident to submit the Incident via self service view of the form through backend.

Below are the steps to reproduce:

• Impersonate as end user having only role as snc_internal.
• Paste the following link to create an incident:

replace xyz with your personal instance

https://xyz.service-now.com/now/nav/ui/classic/params/target/incident.do%3Fsys_id%3D-1%26sysparm_que...

• Incident created does not have any role except 'snc_internal' and user is presented Self Service view and he or she able to submit the Incident directly.

Please help me how can I restrict this behavior.

[Sebastian R_]

You can write an onLoad Client Script, check for fulfiller/backend roles and if they do not exist, redirect to the portal either an incident form for new records or the ticket page of the opened incident

[Dr Atul G- LNG]

Hi @micky09 

https://www.servicenow.com/community/now-platform-blog/6-ways-to-set-up-your-service-portal-for-redi...

https://www.servicenow.com/community/developer-forum/redirect-users-to-portal-if-they-have-no-role-a...