Restrict delegated developers read access [Updated in Security Center 1.3]

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 1분
  • If com.glide.dd_allow_global_access_tables does not contain the recommended value of wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, and sp_page, then those tables could be read by a delegated developer. This could provide the delegated developer read access to sensitive information.

    More information

    Attribute Description
    Property name com.glide.dd_allow_global_access_tables
    Configuration type System Properties (/sys_properties_list.do)
    Data type string
    Recommended value wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, sp_page
    Default value wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, sp_page
    Category Access control
    Security risk
    • Severity score: 2.7
    • CVSS score: Low
    • Security risk details: Ensure that com.glide.dd_allow_global_access_tables is set to wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, sp_page.