Restrict the users not to access other portals by manipulating or changing the URL

[Priyanka159]

 Hello,

I have an issue that different users are able to access different portals by changing or manipulating the URL.

Could you please help me how to restrict it.

[Arun_Manoj]

Hi @Priyanka159 ,

1. Use Access Controls and ACLs: ServiceNow provides Access Control Lists (ACLs) that allow you to control access to various resources. You can use ACLs to restrict access to specific portals based on user roles or conditions. Review the ACLs for each portal and adjust them to ensure that only authorized users can access them.

2. Implement URL Filtering: You can implement URL filtering to validate the requested URL and ensure that users are only able to access authorized portals. This can be done using Business Rules or Script Includes to intercept requests and validate the URL parameters before allowing access.

3. Enforce Portal Access Rules: Implement business rules or script logic to enforce portal access rules. For example, you can create a script that checks the requested portal URL against a list of authorized portals for the user's role. If the requested portal is not authorized, deny access and redirect the user to a default portal or display an access denied message.

4. Use Redirects and URL Rewriting: Implement URL redirects or rewrite rules to ensure that users are always redirected to the appropriate portal URL. This can help prevent users from accessing unauthorized portals by manipulating the URL. You can configure redirects based on user roles or conditions to ensure that users are always directed to the correct portal.

[suresh91]

Hi @Arun_Manoj 

I have also same issue, the users after login into SP they are trying to change or manipulate the URL to access another portals. 

Could you please provide any logic or syntax how to restrict the users by using the one of above method Use Redirects and URL Rewriting? (like., what need to be configured or where we need to do changes?)

Thank you.

[Anwesha3]

HI @Arun_Manoj  how do we implement acl for portal ? can you explain this point in details please

[ankitbanerj]

@Anwesha3 did you get any solution to this?