---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Disable log-and-allow mode for cross-scope dot-walk access

# Disable log-and-allow mode for cross-scope dot-walk access {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The glide.script.dot_walk.log_and_allow_violations property controls logging and enforcement of access violations when dot-walk is used cross-scope.
This property determines whether access violations are logged when dot-walk is used to access table data cross-scope. When enabled, this property logs violations without preventing cross-scope table access through dot-walk.

When set to <kbd class="ph userinput">true</kbd>, access violations are logged but not enforced. When set to <kbd class="ph userinput">false</kbd>, logging is turned off and enforcement is controlled by the
glide.script.dot_walk.enforce_cross_scope_access_all_tables property.

To configure this property:

1. Navigate to /sys_properties_list.do on the instance.
2. Confirm the glide.script.dot_walk.log_and_allow_violations property doesn't exist in the sys_properties table or is set to <kbd class="ph userinput">false</kbd>.

## More information {#sc-disable-log-and-allow-cross-scope-dot-walk-access__section_more_info}

{#sc-disable-log-and-allow-cross-scope-dot-walk-access__table_property_details-allow-enforcement-cross-scope-table-access__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.script.dot_walk.log_and_allow_violations |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | true \| false |
| Recommended value | false |
| Default value | false |
| Fallback value | false |
| Category | [Access control](https://www.servicenow.com/docs/x7vcJqvJ0dwOasc9M2~48A "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 6.4 * CVSS rating: Medium * Security risk details: When this property is set to <kbd class="ph userinput">true</kbd>, authorization checks aren't performed for dot-walk occurring cross-scope. Without authorization checks, dot-walk can be used by an application to access tables that are outside the application scope, potentially exposing sensitive data. {#sc-disable-log-and-allow-cross-scope-dot-walk-access__sc-sec-risk-allow-enforcement-cross-scope-table-access} |
| Dependencies and prerequisites | When set to <kbd class="ph userinput">true</kbd>, this property supersedes the glide.script.dot_walk.enforce_cross_scope_access_all_tables property. No enforcement of access control for cross-scope dot-walk occurs, regardless of the other property value. When set to <kbd class="ph userinput">false</kbd>, enforcement for cross-scope access control when using dot-walk is controlled by the glide.script.dot_walk.enforce_cross_scope_access_all_tables property. |
| Functional impact | When set to <kbd class="ph userinput">true</kbd>, this property logs access violations, but does not enforce access control for cross-scope dot-walk, similar to the behavior of prior releases. When set to <kbd class="ph userinput">false</kbd>, logging is turned off, and enforcement is controlled by the glide.script.dot_walk.enforce_cross_scope_access_all_tables property. There is no functional impact on application behavior when toggling this property. |
[ ]

{#sc-disable-log-and-allow-cross-scope-dot-walk-access__table_property_details-allow-enforcement-cross-scope-table-access}

