Property reference

glide.security.diag_txns_acl

The glide.security.diag_txns_acl property restricts access to specific diagnostic endpoints based on user role and IP address. Admins should ensure this setting is configured correctly to maintain security while allowing necessary access to system diagnostics.

Default: true Type: boolean Application: Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property allows only admin users or users from specified IP addresses to access the stats.do, threads.do, and replication.do endpoints.
What area does it affect? Security and Access Control
What does the default mean? The default value is "true", which means this behavior is enabled by default.
When should you review it? Review this property when configuring user access or troubleshooting security settings.

Out of the box property record

Raw metadata from the property record.

Property name glide.security.diag_txns_acl
Sys ID 0930c2301b311100227e5581be0713cc
Type boolean
Application Global
Default value true
Description If it is set to true, only admin user or user from allowed ip address can access stats.do, threads.do and replication.do.
Updated 2024-05-25 04:04:36

Sources

Official references and nearby text excerpts where this property appears.

Documentation excerpt View supporting context
Context preview Snippet 1
... details, threads and process that are being executed on the server should never be visible or accessible to the end user without appropriate privileges. Either update the value of the glide.security.diag_txns_acl system property to true OR insert this system property with a value of true. Documentation sn_SE10165 1 Act AJAXGlideRecord ACL Checking should be enabled Through client scripts, it is possible ...
Documentation excerpt View supporting context
Context preview Snippet 2
... token does not match. • Type: true | false • Default value: false • Location: System Property [sys_properties] table • Instance Security Hardening Settings: CSRF strict validation (instance security hardening) glide.security.diag_txns_acl Controls who can view the stats.do, threads.do, and replication.do pages. If true, only administrators or users from a known IP address are allowed to view the pages. If false, all ...
Documentation excerpt View supporting context
Context preview Snippet 3
... in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated. 186 Documentation Updates If "glide.security.diag_txns_acl" is not set to the recommended value of "true", then All users (authenticated or not‎ have access to diagnostic pages such as stats.do, xmlstats.do, threads.do and replication.do pages. These endpoints ...