Use the com.snc.process_flow.reporting.require_flow_access property to enforce if an additional access check is required for a user to read a flow check.

When the com.snc.process_flow.reporting.require_flow_access property is set to the recommended value of true, there is an additional access check for a user trying to read a flow context. There may be minor information disclosure if this property is set to false.

More information

Attribute Description
Configuration name com.snc.process_flow.reporting.require_flow_access
Configuration type System Properties (/sys_properties_list.do)
Data type Boolean
Recommended value true
Default value true
Category Access control
Security risk
  • Severity score: 2.7
  • CVSS score: Low
  • Security risk details: Setting this property to false retains its existing behavior. Setting this property to true enforces the added security layer of read access.
Dependencies and prerequisites None
Functional impact When this property is enabled, the security for reading flow context records are increased. The instance enforces that a user trying to read the flow context has read access to the parent flow as well.