---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Disable public access to favorites

# Disable public access to favorites {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.ui.magellan.favorites.allow_public to specify
whether unauthenticated users are allowed to see Favorites in the
navigator.
If the glide.ui.magellan.favorites.allow_public system property is not set to the recommended value of false, then all unauthenticated users can access favorites of the same "Guest" user
in the navigator.

Ensure the property glide.ui.magellan.favorites.allow_public is set to "false.

## More information {#sc-public-access-to-favorites__section_wc1_cqn_phc}

{#sc-public-access-to-favorites__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.ui.magellan.favorites.allow_public |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | \<none\> |
| Fallback value | false |
| Category | [Architecture, design, and threat modeling](https://www.servicenow.com/docs/o6K5g9K_Ue4wErkUu6DFZg "This broad control addresses high level design considerations and key elements to implement a secure application. This covers the tenants of availability, confidentiality processing integrity, non-repudiation and privacy. Additionally, elements of a secure software development lifecycle are included.") |
| Security risk | * Severity score: 4.3 * CVSS rating: Medium * Security risk details: Unauthenticated users are allowed to access and potentially manipulate the Favorites of the shared "Guest" user, increasing the risk of unauthorized UI customization, data exposure, and user interface misuse. {#sc-public-access-to-favorites__ul_g1g_3sf_xwb} |
| Functional impact | Enabling this property acts as a layer of protection from unauthorized users. |
| Dependencies and prerequisites | None |
[ ]

{#sc-public-access-to-favorites__table_ajc_b43_3kb}

