Property reference

`glide.sys.fencing.restricted_caller_access.invalidation_mode`

Selects how Restricted Caller Access records are invalidated when source code in a cross-scope access table is committed in an update set. The default DB_LISTENER mode invalidates records at commit time so cross-scope access reflects the latest source code.

Default: DB_LISTENER
Type: string
Application: Not stated
Category: Security & Access Control

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	Chooses whether a database listener invalidates Restricted Caller Access records when an update set commits source code changes, or whether the script engine leaves associated records intact.
What area does it affect?	Restricted Caller Access
What does the default mean?	The default value is "DB_LISTENER", which is the baseline setting used unless it is changed.
When should you review it?	Review when changing how update set commits affect Restricted Caller Access records.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name	`glide.sys.fencing.restricted_caller_access.invalidation_mode`
Type	string
Application	Not stated
Default value	`DB_LISTENER`
Description	Controls how the system invalidates Restricted Caller Access records when a source code record, such as a script include, in a cross-scope access table is committed in an update set. For more information about RCA privileges, see Restricted caller access privilege settings.

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs Available system properties ↗

Context preview Snippet 1

... | false • Default value: true • Location: System Property [sys_properties] table glide.sys.domain.use_record_domain_for_client_scripts Domain legacy • Type: true | false • Default value: false • Location: System Property [sys_properties] table glide.sys.fencing.restricted_caller_access.invalidation_mode Controls how the system invalidates Restricted Caller Access records when a source code record, such as a script include, in a cross-scope access table is committed in an update set. ...

Additional source link Another external reference for this property

Open reference

Brazil release

This security property is documented for the first time in the Brazil release, with a recommended value and risk score. It may have existed before. Check it for impact when you upgrade.

All Brazil property changes →

More in `glide.sys`

Other properties in the same namespace.

glide.sys.domain.use_record_domain When active, domain scope for data follows each record's domain; the domain-specific data or process propertie glide.sys.domain.use_record_domain_for_client_scripts Determines whether domain handling for client scripts uses the domain of the associated record; the property i glide.sys.domain.use_record_domain_for_data It limits the visibility of related data to the domain of the record being accessed, enhancing security and da glide.sys.domain.verbose It activates detailed domain logging and debug messages, which assist in identifying and resolving domain sepa glide.sys.language It configures the default system language, affecting how text is displayed throughout the ServiceNow interface glide.sys.log_impersonation This property controls whether impersonation events are logged for interactive sessions, helping to track user glide.sys.log_impersonation.non_interactive This property activates or deactivates logging for impersonations occurring in non-interactive sessions, allow glide.sys.log_impersonation.non_interactive.exclusion It allows administrators to specify users whose non-interactive impersonation sessions will not be logged, enh

All 28 properties in glide.sys →