Property reference

`glide.security.query_acl.enabled.data_table`

Enforces query ACL checks for widget data tables. With the default value of true, users cannot query fields they lack access to; setting it to false can expose data through blind queries.

Default: true
Type: boolean
Application: Not stated
Category: Security & Access Control

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	When enabled, query ACLs are enforced for widget data table queries, preventing users from querying fields they are not permitted to access.
What area does it affect?	Service Portal data tables
What does the default mean?	The default value is "true", which means this behavior is enabled by default.
When should you review it?	When changing query ACL enforcement for widget data tables

Property record

No out of the box record exists. ServiceNow scripts read this property and use the default value shown until you create it.

Property name	`glide.security.query_acl.enabled.data_table`
Type	boolean
Application	Not stated
Default value	`true`
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... com.glide.security.query_acl.enabled.sub_lists to true to enforce query ACLs on sublist queries, such as grouped lists and related lists. Set com.glide.security.query_acl.enabled.list_count to true to enforce query ACLs on list count queries. Set glide.security.query_acl.enabled.data_table to true to enforce query ACLs on widget data tables. If any of these system properties are set to false, an attacker can use blind queries to enumerate and exfiltrate ...

Used in

Out of the box artefacts that read this property. Append the path to your instance URL to open the record and see how the value is used.

Widget server script: Data Table The setting controls whether table filters are added using query-access checks or without them; a separate filter-access option also enables the checked path. The shown code does not establish how this differs for users and admins; its default is true. /sp_widget.do?sys_id=5001b062d7101200b0b044580e6103eb

More in `glide.security`

Other properties in the same namespace.

glide.security.multisso.check_table_exists_for_clone This property enables a check for the existence of the sso_properties table during cloning operations… glide.security.nonpassword2.scan.skipped_migration Provides table and field entries that the 3DES data scan excludes from scanning. glide.security.nonpassword2.scan.threshold Sets the threshold that the scan applies to non-password fields, defaulting to 5 when no value is defined. glide.security.password_reset.uri It defines the URI for the password reset functionality within the ServiceNow platform, impacting how users… glide.security.query_range.acl.auditor.disable When enabled, this property stops the query range ACL auditor for users and admins; by default, the auditor… glide.security.response.authenticate.header.auth_profile.first_scheme_on This property configures the behavior of the authentication response header for REST APIs, allowing either a… glide.security.restrict.get.login This property determines whether GET login requests are restricted, enhancing security by limiting potential… glide.security.restrict.get.portal.login This boolean property determines whether access to portal login is restricted, enhancing security by…

All 79 properties in glide.security →