Restrict flow context read access [New in Security Center 1.5]

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：2分

    • Use the com.snc.process_flow.reporting.require_flow_access property to enforce if an additional access check is required for a user to read a flow check.

    When the com.snc.process_flow.reporting.require_flow_access property is set to the recommended value of true, there is an additional access check for a user trying to read a flow context. There may be minor information disclosure if this property is set to false.

    More information

    Attribute Description
    Configuration name com.snc.process_flow.reporting.require_flow_access
    Configuration type System Properties (/sys_properties_list.do)
    Data type Boolean
    Recommended value true
    Default value true
    Category Access control
    Security risk
    • Severity score: 2.7
    • CVSS score: Low
    • Security risk details: Setting this property to false retains its existing behavior. Setting this property to true enforces the added security layer of read access.
    Dependencies and prerequisites None
    Functional impact When this property is enabled, the security for reading flow context records are increased. The instance enforces that a user trying to read the flow context has read access to the parent flow as well.