Property reference

glide.service_portal.widget.allow_list

The glide.service_portal.widget.allow_list property specifies which widgets can access any table on the instance. Admins should review this setting to prevent unauthorized access to sensitive data through misconfigured access controls.

Default
Not stated
Type
Not stated
Application
Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property defines a list of allowed widgets for table access, enforcing access control lists while preventing information disclosure from misconfigured ACLs.
What area does it affect? Service Portal security
What does the default mean? No default value is stated in the ServiceNow documentation.
When should you review it? Review this property when configuring widgets or troubleshooting access issues.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name glide.service_portal.widget.allow_list
Type Not stated
Application Not stated
Default value Not stated
Description Not stated

Sources

Official references and nearby text excerpts where this property appears.

Context preview Snippet 1
... Security Risk ◦(Old‎ <blank> ◦(New‎ This could lead to unintended sensitive information leak through system logs. Configure service portal widgets allow list • Description ◦(Old‎ <blank> ◦(New‎ The Glide Property 'glide.service_portal.widget.allow_list' determines the list of widgets that are allowed to attempt to access any table on the instance. ACLs for those tables will still be enforced. If there are misconfigured empty ...

More in glide.service_portal

Other properties in the same namespace.

All 51 properties in glide.service_portal →