Require authorization for unload requests

Use the glide.basicauth.required.unl (useUnloadFormat) property to designate if incoming unload requests should require basic authentication.

The glide.basicauth.required.unl system property performs authentication while retrieving data from tables/pages in the form of unload data on the instance. If glide.basicauth.required.unl isn't set to the recommended value of true, then the Basic Authentication for the UNL format export processor is disabled. This also could be combined with a wrong role within the guest_user related property, this will lead to unauthenticated access to instance data.

Ensure the property glide.basicauth.required.unl exists in the System Properties [sys_properties] table and is set to true.

More information

Attribute	Description
Configuration name	glide.basicauth.required.unl
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	true
Default value	<none>
Fallback value	false
Category	API and web service
Security risk	Severity score: 7.5 CVSS rating: High Security risk details: This property may allow unauthenticated access to unload data exports, especially when combined with misconfigured guest user roles, creating a serious risk of unauthorized exposure of instance configuration and data.
Functional impact	This remediation enforces a combination of authentication methods, in the form of basic authentication and system level access control. It performs this authentication while retrieving data from tables/pages in the form of unload data on the instance.
Dependencies and prerequisites	None