glide.security.allow_unauth_roleless_acl The glide.security.allow_unauth_roleless_acl property determines whether scripted Access Control Lists can permit access to unauthenticated users. Setting this property to false enhances security by preventing unauthorized access to resources protected by roleless scripted ACLs.
The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property controls access for unauthenticated users to resources governed by roleless scripted Access Control Lists, impacting system security. |
|---|---|
| What area does it affect? | Access Control Lists |
| What does the default mean? | No default value is stated in the ServiceNow documentation. |
| When should you review it? | Review this property when configuring security settings or assessing access control measures. |
Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.
| Property name | glide.security.allow_unauth_roleless_acl |
|---|---|
| Type | Not stated |
| Application | Not stated |
| Default value | Not stated |
| Description | Not stated |
Official references and nearby text excerpts where this property appears.
glide.securityOther properties in the same namespace.
glide.security.3des.static_keys_usable
This property enables or disables the use of static 3DES keys for encryption within the ServiceNow platform.
glide.security.3des.suspension_date
This property records the timestamp for when the 3DES key removal job was paused, impacting key management pro
glide.security.acl_with_invalid_roles_strict_deny
This property enforces strict denial of access for ACLs that reference only deleted or non-existent roles, pre
glide.security.admin.override.accessterm
This property, when set to true, ensures that the admin overridable condition is assessed specifically at the
glide.security.attachment_type.use_blacklist
This property enables or disables the validation of file attachments against defined exclusion lists to enhanc
glide.security.csrf.handle.ajax.timeout
This property determines whether the system provides error handling for timed-out Ajax requests, enhancing use
glide.security.csrf.httpauth_processor_allowlist
This property allows specified processors to bypass CSRF enforcement when the broader CSRF checks for authenti
glide.security.csrf.processor.all.authenticated.enabled
This property enforces CSRF token validation for authenticated requests, rejecting those without valid tokens