glide.security.acl_with_invalid_roles_strict_deny The glide.security.acl_with_invalid_roles_strict_deny property denies access for any ACL that references all invalid roles. This ensures that misconfigured ACLs do not inadvertently grant access to unauthorized users, which is crucial for maintaining security integrity.
trueThe answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property enforces strict denial of access for ACLs that reference only deleted or non-existent roles, preventing unauthorized access based on misconfigured role references. |
|---|---|
| What area does it affect? | Access control security |
| What does the default mean? | The default value is "true", which means this behavior is enabled by default. |
| When should you review it? | Review this property during role management or security audits to ensure proper access control. |
Raw metadata from the property record.
| Property name | glide.security.acl_with_invalid_roles_strict_deny |
|---|---|
| Sys ID | dddd463cb7b33210a7a60994ae11a9d3 |
| Type | boolean |
| Application | Global |
| Default value | true |
| Description | This property denies access for any ACL that references all invalid roles in sys_security_acl_role. For partial invalid roles it will not deny. |
| Updated | 2026-05-08 00:52:50 |
Official references and nearby text excerpts where this property appears.
glide.securityOther properties in the same namespace.
glide.security.3des.key_retention_duration
This property sets the retention duration for keys managed by the 3DES key removal job, influencing when keys
glide.security.3des.removal_job_status
This property reports the progress of the scheduled job that deactivates old 3DES static keys, ensuring safe m
glide.security.3des.static_keys_usable
This property enables or disables the use of static 3DES keys for encryption within the ServiceNow platform.
glide.security.3des.suspension_date
This property records the timestamp for when the 3DES key removal job was paused, impacting key management pro
glide.security.admin.override.accessterm
This property, when set to true, ensures that the admin overridable condition is assessed specifically at the
glide.security.allow_unauth_roleless_acl
This property controls access for unauthenticated users to resources governed by roleless scripted Access Cont
glide.security.attachment_type.use_blacklist
This property enables or disables the validation of file attachments against defined exclusion lists to enhanc
glide.security.csrf.handle.ajax.timeout
This property determines whether the system provides error handling for timed-out Ajax requests, enhancing use