Service Desk Practitioners Forum
cancel

Access permissions on servicecall item through web-api

Highlighted
Yuri_
Regular Contributor.

Access permissions on servicecall item through web-api

every user, having a SP Account, has potential to access servicecall item using web-api with no any restrictions. How can i prevent it?
SD 4.5.
2 REPLIES
Vasily Kamenev
Acclaimed Contributor.

Re: Access permissions on servicecall item through web-api

Hi
You have the problem how use restricted view for SP Account? So, in web-api, doas not exist classes for view , you can use sp.jar archive where exist bean and view functions.

Vasily
Yuri_
Regular Contributor.

Re: Access permissions on servicecall item through web-api

my problem is that access to serviceecall fields from SP Account users is controlled only by user interface. so every SP user can write own (maybe harmful) java code (web-api is available), managing servicecalls without restrictions. correct me is i`m not right plz