Is there a way to restrict access to the stats.do page?

[jordanaluyen]

I wanted to know if you could restrict access to the <instance_name>/stats.do URL. Visibility of the module in the navigation is restricted to admins; however, users can still type stats.do in the URL and access the page. How can I go about preventing this? Thanks in advance.

[Chuck Tomasi]

Hi Jordan,

Not that I'm aware. It doesn't even require login credentials to access. I believe HI uses this (and xmlstats.do) to periodically check on the system. I could be wrong and the instance reports home now.

You may want to reach out to support to see if there are any implications about restricting this (if it can be done.)

Is there a business problem with a few key users typing stats.do in the navigation filter or is it just annoying. It's just a status report (and a pretty ugly one at that.) If they keep doing it, and can understand it, offer them a job. 🙂

[jordanaluyen]

Thanks for the response! I did find a way to do it out of box, I replied below.

[jordanaluyen · Accepted solution]

Found the answer:

Navigate to the sys_properties table

Add/Edit the glide.security.diag_txns_acl system property to true.

[Chuck Tomasi]

Thanks for sharing. I learned something new today - I'm done.