Enforce security rules to sharing dashboards [New in Security Center 1.3]

Use the glide.cms.dashboards.sharing_with_secure_search property to control whether users can share dashboards.

When the glide.cms.dashboards.sharing_with_secure_search property is not set to true, users can share dashboard groups and roles that they do not have access to. Enabling this property enforces access control lists (ACLs) when searching the sys_user, sys_user_role, and sys_user_group tables during the dashboard sharing process. Sharing a dashboard excessively can lead to users, groups, or roles accessing data that they should not have permission to view, potentially compromising sensitive information. Therefore, it is recommended to set glide.cms.dashboards.sharing_with_secure_search to true so that dashboards are shared only with those who have the appropriate permissions.

More information

Attribute	Description
Configuration name	glide.cms.dashboards.sharing_with_secure_search
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	true
Default value	false
Category	Access control
Security risk	Severity score: 3.5 CVSS score: Low Security risk details: Not setting this property to the recommended value of true causes access control lists to not be enforced when searching the sys_user, sys_user_role, and sys_user_group tables. This could lead to dashboards being shared with unauthorized users, exposing sensitive information.
Dependencies and prerequisites	None
References	Access control
Functional impact	This property applies security rules to the list of users, user groups, and roles that are visible when sharing dashboards.