Where can I find this end point? api/now/ui/navigator/favorites

reginabautista · ‎09-16-2020

Hi guys I need to deactivate the endpoint below or ensure it's not available if user is not logged in. Would anyone know where I could find this endpoint?

https://[your instance].service-now.com/api/now/ui/navigator/favorites

Thanks

Regina

reginabautista · ‎09-30-2020

Hi Ankit,

It seems there is no way for us to access this endpoint. This is meant to be accessible by non-authenticaed users.

HI Support came back with the following answer:

We have known Problem related to this issue 'PRB1397853' and it was closed as working as expected with following comments from our development.

"This API is intended to be accessible for unauthenticated users, it returns the correct information for this case. This endpoint was designed to be accessible for non-authenticated users. The endpoint is "secured" as it only returns the information that was configured to be public and nothing else. There is no security issues here"

View solution in original post

sushantmalsure · ‎10-26-2020

@reginabautista
Yes this end point is meant to be accessible by non-authenticated users but there is a work around to this problem as well, if you DO NOT want this enpoint to return anything then you can create before query business rule on 3 tables (Bookmarks, Navigator History and Bookmarks Group) which is responsible for displaying data when 'api/now/ui/navigator/favorites' is accessed. With these business rules, we are restricting any access to guest users to information via api/now/ui/navigator/favorites and by this way we can restrict the data to be shown.

If my answer has helped with your question, please mark my answer as accepted solution and give a thumb up.
Regards,Sushant Malsure