---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Require authorization for csv requests

# Require authorization for csv requests {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.basicauth.required.csv property to designate if incoming CSV (Comma-Separated Values) requests should require basic authentication.

## More information {#sc-require-authorization-for-csv-requests__section_more_information}

If the glide.basicauth.required.csv system property isn't set to the recommended value of true, then Basic Authentication for CSV format export processor is disabled. This also happens
when combined with a wrong role within the guest_user related property (Ex: high privileged role). This will lead to unauthenticated access to instance data.

Ensure the property glide.basicauth.required.csv exists in the System Properties \[sys_properties\] table and is set to true.  
Warning:  
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

## More information {#sc-require-authorization-for-csv-requests__section_wc1_cqn_phc}

{#sc-require-authorization-for-csv-requests__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.basicauth.required.csv |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | false |
| Category | [API and web service](https://www.servicenow.com/docs/8tbkriHSZwhTDBI3AxKzzQ "The API and Web Service category ensures that applications have appropriate authentication, authorization and session management, validate all input that traverses a trust boundary and include security controls for all API types.") |
| Security risk | * Severity score: 7.5 * CVSS rating: High * Security risk details: Unauthenticated access to CSV export data, when combined with misconfigured guest user role, poses a significant risk of unauthorized data exposure. {#sc-require-authorization-for-csv-requests__ul_g1g_3sf_xwb} |
| Functional impact | This remediation enforces a combination of authentication methods, in the form of basic authentication and system level access control. * It performs this authentication while retrieving data from tables/pages in the form of CSV data on the instance. * It restricts any guest users who are currently accessing this data. If applicable, you may need to create a new account for users who need access to this content, with necessary access control permissions. {#sc-require-authorization-for-csv-requests__ul_ipd_mjj_p3c} To learn more, see [Retrieving data from a CSV formatted file](https://www.servicenow.com/docs/access?context=t_RetrieveDataFromACSVFormatFile&version=brazil&pubname=brazil-integrate-applications&ft:locale=en-US). |
| Dependencies and prerequisites | None |
[ ]

{#sc-require-authorization-for-csv-requests__table_ajc_b43_3kb}