Prevent record producer submit via Rest API

[giuseppem]

Hi all

I need to prevent users submit request or hr_case by Rest API call. I want to reserve this capability just some user with specific role. In other words I need to prevent users without a specific role from invoking this endpoint https://instance.service-now.com/api/sn_sc/servicecatalog/items/{items}/submit_producer

I suppose need to create a REST_Endpoint ACL but I don't know how define this ACL. Can anyone share share ACL sample?

Regards

[Jean Ferreira]

You can try to create a before insert business rule.

In case the record and user does not follow the criteria you want, you can abort the insert.

current.setAbortAction(true);