Where can I find this end point? api/now/ui/navigator/favorites

reginabautista · ‎09-16-2020

Hi guys I need to deactivate the endpoint below or ensure it's not available if user is not logged in. Would anyone know where I could find this endpoint?

https://[your instance].service-now.com/api/now/ui/navigator/favorites

Thanks

Regina

reginabautista · ‎09-30-2020

Hi Ankit,

It seems there is no way for us to access this endpoint. This is meant to be accessible by non-authenticaed users.

HI Support came back with the following answer:

We have known Problem related to this issue 'PRB1397853' and it was closed as working as expected with following comments from our development.

"This API is intended to be accessible for unauthenticated users, it returns the correct information for this case. This endpoint was designed to be accessible for non-authenticated users. The endpoint is "secured" as it only returns the information that was configured to be public and nothing else. There is no security issues here"

View solution in original post

sachin_namjoshi · ‎09-16-2020

This is a platform API.

We don't have access to this API since it's internal to servicenow.

But, you can configure UI script to redirect user with custom message if user is not logged in.

Regards,

Sachin

reginabautista · ‎09-16-2020

Thanks Sachin, can you provide some guidance on how to accomplish this please

MrMuhammad · ‎09-16-2020

Hi,

As a System Administrator with elevated privileges, you can create ACL as follows

Type - REST_Endpoint

operation - execute

Name - /api/now/ui/navigator/favorites

Advanced - true

Script - answer = gs.getSession().isInteractive();

Alternatively

Save and it's done!

See screenshot for reference

Thanks,

Sharjeel

Regards,
Muhammad

reginabautista · ‎09-16-2020

Hi Muhammad, thanks for the reply. I tried this approach but issue still persist.I've added ITIL role as they should be able to access if needed. Am I missing anything?