Users are Able to see Page Structure on Forms restricted by ACL'sIssue <!-- div.margin{ padding: 10px 40px 40px 30px; } table.tocTable{ border: 1px solid; border-color:#E0E0E0; background-color: rgb(245, 245, 245); padding-top: .6em; padding-bottom: .6em; padding-left: .9em; padding-right: .6em; } table.noteTable{ border:1px solid; border-color:#E0E0E0; background-color: rgb(245, 245, 245); width: 100%; border-spacing:2; } table.internaltable { white-space:nowrap; text-align:left; border-width: 1px; border-collapse: collapse; font-size:14px; width: 85%; } table.internaltable th { border-width: 1px; padding: 5px; border-style: solid; border-color: rgb(245, 245, 245); background-color: rgb(245, 245, 245); } table.internaltable td { border-width: 1px; padding: 5px; border-style: solid; border-color: #E0E0E0; color: #000000; } table tr td { padding: 15px; } .title { color: #D1232B; font-weight:normal; font-size:28px; } h1{ color: #D1232B; font-weight:normal; font-size:21px; margin-bottom:-5px } h2{ color: #646464; font-weight:bold; font-size:18px; } h3{ color: #000000; font-weight:BOLD; font-size:16px; text-decoration:underline; } h4{ color: #646464; font-weight:BOLD; font-size:15px; text-decoration:; } h5{ color: #000000; font-weight:BOLD; font-size:13px; text-decoration:; } h6{ color: #000000; font-weight:BOLD; font-size:14px; text-decoration:; } hr{ border-top-width: 1px; border-top-style: solid; border-top-color: #cccccc; } ul { list-style: disc outside none; margin-left: 0; } li { padding-left: 1em; } --> Overview When users who doesn't have read/ write access to a table/ record try to open the record directly(using a url), they are able to see page structure which includes Form Sections and Related Lists. Example Screenshot Below: UI Page structure is visible for Forms By default and as per OOB ACL configuration, all users are provided with access to UI pages via */read ACL. Further access to certain UI Pages can be managed by creating read ACL on specific pages, for Forms, it is maintained by */read ACL on UI_Page. ACL's applied on Tables only restrict access to their data and not the form structure which comes from a UI Page. Hence users without any access to table data are able to see the Form structure. In case page structure is required to be restricted for unauthorized users then ACL would need to be customized to add conditions/ scripts which could define the criteria/ parameters for access restriction. Such ACL would be required to be applied on UI_Page Version Information This Information is applicable to all ServiceNow versions.