Restrict 'Export Directly from URL'

[matt_kean]

Is there any way to restrict the ability to 'Export Directly from URL' without affecting read access for a user?

Export Directly from URL:
https://docs.servicenow.com/bundle/istanbul-servicenow-platform/page/administer/exporting-data/task/...

I'd like to specifically control export without affecting read.

[Mwatkins · Accepted solution]

You can block URL access to exporting by Excel by creating an ACL on the ExcelOutputProcessor like so:

N.B. This will not stop a user from exporting via the Context Menu drop down UI on the list.

Export format processors

Processor ACL rules

[matt_kean]

Thank you Matthew.   It appears that 'Processor ACL rules' only restrict by role.   You can't set a condition or use the 'Advanced' option to write your own script.   I'm afraid I don't want to restrict access by role.   Any other thoughts?

[Mwatkins]

I'm not sure why it appears that way to you. There are out-of-box processor rules that use the script field and conditions field and it works fine for me when I am using admin. Do you need to elevate privileges? Not sure...

[matt_kean]

FYI - I am on Istanbul Patch 3.
I'm pretty sure that a client script called 'Disable script for out of scope tables' is the culprit