---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security
Release :
- brazil
ft:locale :
- en-US
ft:publication_title :
- Brazil Platform security
ft:clusterId :
- psec
bundleId :
- psec
workflow :
- Platform
---
# Enforce cross-scope table access when performing dot-walk
# Enforce cross-scope table access when performing dot-walk {#ariaid-title1}
Release version: Brazil
Updated September 10, 2026
 1 minute to read
The glide.script.dot_walk.enforce_cross_scope_access_all_tables property defines the base access control decision for all table data accessed through dot-walk when the access is cross-scope.
This property controls whether authorization checks are performed for all table data accesses that are cross-scope through dot-walk. When set to true, authorization checks are performed for all cross-scope table data accesses unless a table has explicitly set the enforce_dot_walk_cross_scope_access dictionary attribute to false.
When set to false, no authorization checks are performed for cross-scope table data accesses unless a table has explicitly set the enforce_dot_walk_cross_scope_access dictionary attribute to true.
To configure this property:
1. Navigate to /sys_properties_list.do on the instance.
2. Set the glide.script.dot_walk.enforce_cross_scope_access_all_tables property to true.
## More information {#sc-enforce-cross-scope-table-access-when-performing-dot-walk__section_more_info}
{#sc-enforce-cross-scope-table-access-when-performing-dot-walk__table_property_details-enforce-cross-scope-table-access__entry__2}
| Attribute | Description |
|-|-|
| Configuration name | glide.script.dot_walk.enforce_cross_scope_access_all_tables |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | false |
| Category | Access Control |
| Security risk | * Security risk rating: Medium * Security score: 6.4 * Security risk details: When this property is set to false, no authorization checks are performed for cross-scope table data accesses unless a table has explicitly set the enforce_dot_walk_cross_scope_access dictionary attribute to true. Without authorization checks, dot-walk can be used by an application to access tables that are outside the application scope, potentially exposing sensitive data. {#sc-enforce-cross-scope-table-access-when-performing-dot-walk__sc-sec-risk-enforce-cross-scope-table-access} |
| Dependencies and prerequisites | When the glide.script.dot_walk.log_and_allow_violations property is set to true, it supersedes this property. No enforcement of access control for cross-scope dot-walk occurs, regardless of this property value. The enforcement for cross-scope access control when using dot-walk is controlled by this property when glide.script.dot_walk.log_and_allow_violations is set to false. |
| Functional impact | When set to true, authorization checks are performed for all cross-scope table data accesses unless a table has explicitly set the enforce_dot_walk_cross_scope_access dictionary attribute to false. Because dot-walk access control was not enforced cross-scope before the Zurich release, this may cause some applications to not function correctly if they attempt to access tables outside of their scope through dot-walk. |
[ ]
{#sc-enforce-cross-scope-table-access-when-performing-dot-walk__table_property_details-enforce-cross-scope-table-access}