Enforce security rules to sharing dashboards

Use the glide.cms.dashboards.sharing_with_secure_search property to control whether users can share dashboards.

When the glide.cms.dashboards.sharing_with_secure_search system property is not set to true, a user can share a dashboard to groups and roles that they do not personally have access to. This property enforces ACLs on searching the User [sys_user], Roles [sys_user_role], and Groups [sys_user_group] tables when sharing a dashboard.

Set the glide.cms.dashboards.sharing_with_secure_search system property is set to true.

More information

Attribute	Description
Configuration name	glide.cms.dashboards.sharing_with_secure_search
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	true
Default value	<none>
Fallback value	false
Category	Access control
Security risk	Severity score: 3.5 CVSS score: Low Security risk details: Oversharing a dashboard may result in minor confidentiality impacts in cases where a user shares a dashboard with a user, group, or role that should not access to the dashboard.
Dependencies and prerequisites	None
References	Access control
Functional impact	This property applies security rules to the list of users, user groups, and roles that are visible when sharing dashboards.