Require authorization for data broker rest API [Updated in Security Center 1.3]

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Use the glide.basicauth.required.databrokerrestapiprocessor property to require basic authorization for all inbound Data Broker Rest API requests.

    If the glide.basicauth.required.databrokerrestapiprocessor system property is not set to the recommended value of true, then basic authorization is not required for all inbound Data Broker Rest API requests.

    Warning:
    This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

    More information

    Attribute Description
    Configuration name glide.basicauth.required.databrokerrestapiprocessor
    Configuration type System Properties (/sys_properties_list.do)
    Data type Boolean
    Recommended value true
    Default value true
    Fallback value false
    Category Architecture, design, and threat modeling
    Security risk
    • Severity score: 8.6
    • CVSS rating: High
    • Security risk details: This could lead to unauthenticated information disclosure from the instance.
    Functional impact None
    Dependencies and prerequisites None