In SBM get " Direct Access not Allowed" if URL for transition is built in a script

ID:    D12573
Published:    11 May 2011
Updated:    30 September 2011

Defect Id


Originally Reported Against

SBM 2009 R4.01

Also Affects

Service Manager 1.1




If you build a URL for a transition in a script and expose this in a field in the form then you will get "Direct Access not Allowed" when you try to activate this URL. This occurs because security has been built into a number of SBM actions to not allow Cross Site Request Forgery attacks.


If you are a customer upgrading from TeamTrack or an earlier version of SBM (pre 2009 R1) then please contact Support who can advise of alternatives.

Find Answers

Type a question or describe what you are looking for below

My Recent Searches

Welcome kb sso

Additional Assistance

  • Submit a Case Online
  • FAQs