---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce Strict User Image Upload

# Enforce Strict User Image Upload {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.security.strict.user_image_upload property to enable
Access Control for the upload/update of a profile picture when performed on a user
record.
If the glide.security.strict.user_image_upload system property isn't set to the recommended value of true, then ACLs aren't enforced on image uploads to the Photo field. When the
property is set to true, the table ACLs are enforced when uploading photos, only allowing authorized users to upload an image.

Ensure that the property glide.security.strict.user_image_upload is set to true.

## More information {#sc-enforce-strict-user-image-upload__section_wc1_cqn_phc}

{#sc-enforce-strict-user-image-upload__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.security.strict.user_image_upload |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | true |
| Category | [Access control](https://www.servicenow.com/docs/UcoTP53NgzpgtyyAIm1CdQ "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 3.7 * CVSS rating: Low * Security risk details: An unauthorized user may upload an image to another user's profile. {#sc-enforce-strict-user-image-upload__ul_g1g_3sf_xwb} |
| Functional impact | No functionality impact as authorized users are still able to upload images to their user profile. |
| Dependencies and prerequisites | None |
[ ]

{#sc-enforce-strict-user-image-upload__table_ajc_b43_3kb}