Namespace
glide.security
45 ServiceNow system properties in this namespace, with what each one does.
glide.security.3des.encryption.allow |
This property allows the use of 3DES encryption for deprecated APIs, impacting how data is encrypted and decrypted within the system. |
glide.security.3des.key_retention_duration |
This property sets the retention duration for keys managed by the 3DES key removal job, influencing when keys are deleted from the system. |
glide.security.3des.removal_job_status |
It provides the current status of the 3DES key removal for instances that have successfully migrated from 3DES keys. |
glide.security.3des.static_keys_usable |
This property enables or disables the use of static 3DES keys for encryption within the ServiceNow platform. |
glide.security.3des.suspension_date |
This property records the timestamp for when the 3DES key removal job was paused, impacting key management processes. |
glide.security.admin.override.accessterm |
This property, when set to true, ensures that the admin overridable condition is assessed specifically at the access term level, impacting how access permissions are enforced. |
glide.security.attachment_type.use_blacklist |
This property enables or disables the validation of file attachments against defined exclusion lists to enhance security. |
glide.security.csrf.processor.all.authenticated.logging_enabled |
It activates logging for Cross-Site Request Forgery violations in authenticated sessions, helping to track potential security threats. |
glide.security.csrf.strict.validation.mode |
This property determines whether strict validation of CSRF tokens is enforced, blocking requests with mismatched tokens. |
glide.security.csrf_previous.allow |
This property allows expired secure tokens to be used for request validation, impacting CSRF protection mechanisms. |
glide.security.csrf_previous.time_limit |
This property defines the duration a secure token remains valid, expiring when the user session ends unless specific conditions are met. |
glide.security.diag_txns_acl |
This property allows only admin users or users from specified IP addresses to access the stats.do, threads.do, and replication.do endpoints. |
glide.security.empty_acl.popup_window.enabled |
This property enables a popup window alerting users when an empty ACL is encountered, enhancing security awareness. |
glide.security.empty_acl_bounce |
This property triggers a fix for empty ACLs by adding a script to their configuration, ensuring they are properly secured during key system events. |
glide.security.enable.deny_empty_or_invalid_acl_validation |
This property enforces validation checks on ACLs, ensuring they are properly configured and not left empty or invalid. |
glide.security.enable_archive_table_acls |
This property enables or disables the enforcement of active 'read' ACLs on archive tables, defaulting to true for security purposes. |
glide.security.exclusive_explicit_roles |
This property prevents role collisions by aborting actions that would cause conflicts between the snc_external and snc_internal roles. |
glide.security.expander.view.legacy |
This property controls the evaluation method of View ACLs, allowing for either legacy or updated behavior that aligns with table ACLs. |
glide.security.explain.write.locks |
This property controls whether explanations are shown for form elements that are locked, enhancing user understanding of field restrictions. |
glide.security.explicit_roles.enable_internal_user_blacklist |
This property enforces a blacklist for internal user roles, preventing external users from being assigned the snc_internal role when set to true. |
glide.security.explicit_roles.fix_in_memory |
This property, when set to true, ensures that explicit roles are retained in memory, preventing potential inconsistencies during user interactions. |
glide.security.explicit_roles.internal_user_blacklist |
It prevents specific user classes from being assigned the snc_internal role, ensuring they receive the snc_external role when the Explicit Roles plugin is active. |
glide.security.file.mime_type.validation |
This property enables or disables MIME type validation for file attachments, checking uploaded files against their configured extensions. |
glide.security.forgot_password.display.link |
This property controls whether the 'Forgot Password' link appears on the login page, facilitating user password recovery. |
glide.security.get_roled_users.limit |
This property defines the upper limit on the number of user-role entries that can be queried, with a default of 10 million and an option for no limit when set to -1. |
glide.security.glideencrypter.allow |
This property allows or restricts the usage of the Glide Encrypter API based on its boolean value. |
glide.security.granular.create |
This property determines whether create rules are enforced for new records, as opposed to general write permissions. |
glide.security.groupby_acl_check |
This property determines whether ACL checks are enforced for group names during GroupBy operations, enhancing security by validating access against real group data. |
glide.security.manager |
This property determines the security manager implementation, affecting how security contexts are managed in ServiceNow. |
glide.security.mime_type.aliasset |
This property configures the MIME types that are allowed for certain asset files, impacting how files are processed and validated during uploads. |
glide.security.multisso.check_table_exists_for_clone |
This property enables a check for the existence of the sso_properties table during cloning operations between instances with differing multisso configurations. |
glide.security.password_reset.uri |
It defines the URI for the password reset functionality within the ServiceNow platform, impacting how users access password recovery options. |
glide.security.restrict.get.login |
This property determines whether GET login requests are restricted, enhancing security by limiting potential attack vectors. |
glide.security.restrict.get.portal.login |
This boolean property determines whether access to portal login is restricted, enhancing security by limiting login attempts. |
glide.security.sandbox_no_logging |
This property controls the availability of log(), logError(), and logWarning() methods in the sandbox, enhancing security by limiting logging capabilities. |
glide.security.scoped_administration |
This property restricts admin access to scoped applications, enhancing security by limiting visibility to only authorized users. |
glide.security.scoped_administration.honor_global_acl |
This property enables or disables the honoring of Global ACLs for specific tables defined in sys_scoped_admin_acl_table, affecting access management. |
glide.security.scripting_role.auto_provisioning |
This property determines if auto provisioning is active for Scripting Governance, facilitating automatic role assignments based on defined criteria. |
glide.security.scripting_role.provisioning_job_running |
This property is a boolean that shows if the initial provisioning job for Scripting Governance is running, impacting the management of scripting roles. |
glide.security.strict.actions |
It requires conditions for UI actions to be validated before execution, rather than just during form rendering, improving security measures. |
glide.security.strict.updates |
It enforces strict security validation for inbound transactions during form submissions, ensuring that user permissions are verified. |
glide.security.strict_elevate_privilege |
This property enforces strict privilege elevation requirements for 'admin' role users, enhancing security by controlling access. |
glide.security.use_csrf_token |
It configures the system to require a secure token for incoming requests, enhancing protection against CSRF attacks. |
glide.security.use_explicit_roles |
This property determines whether users without 'snc_internal' or 'snc_external' roles are assigned default roles based on their classification, affecting their access to system features. |
glide.security.userpref_csrf_check.enable |
This property activates CSRF checks specifically for user preference operations, enhancing security by preventing unauthorized actions. |