---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configure service portal widgets table allow list

# Configure service portal widgets table allow list {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Learn how the glide.service_portal.widget.table_allow_list property enhances security by listing tables accessible to unauthenticated users through Service Portal widgets, dependent on additional checks
and specific glide property settings.
The glide.service_portal.widget.table_allow_list property contains the list of tables allowed to be accessed by unauthenticated users through Service Portal widgets that make use of the additional
security checks provided in the SNCACLWidgetUtil script include. This property is only enforced if the Glide Property The glide.service_portal.widget.table_allow_list property is
true. There may be unauthenticated information disclosure if unnecessary tables are listed in this property. Table ACLs will still be evaluated as previously occurred.

Ensure that the glide.service_portal.widget.table_allow_list property is empty, or the list is restricted to the smallest number of tables with use cases for unauthenticated access.

## More information {#sc-configure-service-portal-widgets-table-allow-list__section_wc1_cqn_phc}

{#sc-configure-service-portal-widgets-table-allow-list__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.service_portal.widget.table_allow_list |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | String |
| Recommended value | \<empty\> |
| Default value | '' (empty string) |
| Fallback value | \<empty\> |
| Category | [Access control](https://www.servicenow.com/docs/x7vcJqvJ0dwOasc9M2~48A "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 3.7 * CVSS rating: Low * Security risk details: Unauthenticated users may gain access to sensitive data through Service Portal widgets, potentially leading to information disclosure despite existing table ACLs. {#sc-configure-service-portal-widgets-table-allow-list__ul_g1g_3sf_xwb} |
| Functional impact | The table list controls access to the tables from which the widget is allowed to retrieve data. |
| Dependencies and prerequisites | The glide.service_portal.widget.enforce_public_check property must be set to true for the glide.service_portal.widget.table_allow_list setting to take effect. |
[ ]

{#sc-configure-service-portal-widgets-table-allow-list__table_ajc_b43_3kb}