Set guest user for soap requests

Configure this property to control the level of access of unauthenticated SOAP requests.

Use the com.glide.soap.guest_user system property to control the access level of unauthenticated SOAP requests. If this property isn't set to the recommended value of soap.guest or is set to a user with limited privileges, then SOAP requests execute on behalf of this user.

Ensure the property is set to soap.guest to ensure an appropriate level of access for unauthenticated SOAP requests.

More information

Attribute	Description
Configuration name
Configuration type	System Properties (/sys_properties_list.do)
Data type	String
Recommended value	soap.guest
Default value	soap.guest
Fallback value	soap.guest
Category	Access control
Security risk	Severity score: 8.1 CVSS score: High Security risk details: Unauthenticated SOAP requests can allow unauthorized access if not properly restricted. Evaluating these requests against a minimally privileged user helps reduce the risk of exposing sensitive operations. Failure to enforce this control may result in elevated access and compromise system integrity.
Functional impact	SOAP requests are restricted to the permissions of the soap.guest user. If an integration relies on a resource that does not have the appropriate ACLs for soap.guest, those requests will result in permission denials.
Dependencies and prerequisites	None