---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Apply ACLs to AJAXGlideRecord (client-side Glide record)

# Apply ACLs to AJAXGlideRecord (client-side Glide record) {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use a system property to perform access control list (ACL) rule validation when
server-side records (for example, tables) are accessed using GlideAjax APIs within a client
script.
If you choose to apply access control lists (ACL) to GlideAjax API
calls, then you can only query data to which the currently connected user has rights to
access. For example, if the user is logged in as an ESS user who has no rights to read the
`cmn_location` table, then any GlideAjax API call by the
user will fail.

If the ServiceNow AI Platform is running without GlideAjax ACL call checking, an API can return information that the currently logged in user could not otherwise access.  
Use GlideRecordSecure when querying data to ensure the highest level of security. GlideRecord relies on ACL enforcement through configurations whereas GlideRecordSecure applies stricter security controls. GlideRecordSecure offers a more secure, out-of-the-box solution for handling sensitive data.  
Note:  
Set this property in System PropertiesSecurity.
{#r_ApplyACLsToAJAXGlideRecord__simpletable_oyj_zk4_kq__entry__2}

| Property | Default |
|-|-|
| Apply standard security ACLs to AJAXGlideRecord calls | ACL checking enforced |
[ ]

{#r_ApplyACLsToAJAXGlideRecord__simpletable_oyj_zk4_kq}  
Warning:  
The sys_class_name, sys_id and sys_domain are ignored for ACL checks.

To learn more about this property, see [Require AJAXGlideRecord ACL checking](https://www.servicenow.com/docs/9RWKhX~4Ovjw78E7RUx9Fg "Use the glide.script.secure.ajaxgliderecord property to perform access control rule (ACL) validation when server-side records, such as tables, are accessed using GlideAjax APIs within a client script.") in Instance Security Hardening Settings.

*[\>]: and then