---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Require AJAXGlideRecord ACL checking

# Require AJAXGlideRecord ACL checking {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.script.secure.ajaxgliderecord property to perform
access control rule (ACL) validation when server-side records, such as tables, are accessed
using GlideAjax APIs within a client script.
The glide.script.secure.ajaxgliderecord systm property toggles ACL validation for GlideAjax API calls. If glide.script.secure.ajaxgliderecord is not set to the recommended value of
true, then ACL validation will not be completed for GlideAjax requests.

Ensure that the property glide.script.secure.ajaxgliderecord is set to true.  
Warning:  
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

## More information {#sc-enabling-ajaxgliderecord-acl-checking__section_wc1_cqn_phc}

{#sc-enabling-ajaxgliderecord-acl-checking__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.script.secure.ajaxgliderecord |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | true |
| Category | [Access control](https://www.servicenow.com/docs/x7vcJqvJ0dwOasc9M2~48A "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 8.1 * CVSS rating: High * Security risk details: This could lead to server-side resources being accessed by users without proper authorization. {#sc-enabling-ajaxgliderecord-acl-checking__ul_g1g_3sf_xwb} |
| Functional impact | This remediation enforces the ACL relationship with server-side records when the requests are made using the AJAXGlideRecord API calls. If the ACL configuration is not properly configured, then there is potential impact. For more details on its impact, and how to identify it, see Refer to [Audit and review client-side GlideRecord (AJAXGlideRecord) transactions \[KB0550828\]](https://support.servicenow.com/kb_view.do?sysparm_article=KB0550828). |
| Dependencies and prerequisites | None |
[ ]

{#sc-enabling-ajaxgliderecord-acl-checking__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=brazil&pubname=brazil-platform-administration&ft:locale=en-US).