Block direct URL access to Process requisition page

Summary:

We are configuring custom buyer roles who are able to access the Process Requisitions Redwood page.

In order to do this

• we created 2 copies of the standard Buyer role
• we eliminated the standard POR_REQUISITION_LINE_PROCESSING_DUTY role form one of the buyer role while keeping it for the other
• we assigned these roles to users
• we created a sandbox where we give access to the redwood page only to users having the custom role with POR_REQUISITION_LINE_PROCESSING_DUTY role

This is working fine from navigation perspective. However if we use the direct URL (without passing through a menu entry or icon) the main redwood page <host>fscmUI/redwood/process-requisitions/manage is still accessible for a user even if i does not have any privilege.