Restrict flow context read access

Use the com.snc.process_flow.reporting.require_flow_access property to enforce if an additional access check is required for a user to read a flow check.

When the com.snc.process_flow.reporting.require_flow_access system property is set to a value of true, there is an additional access check for a user trying to read a flow context. A user must have access to the parent flow to be able to read the flow context.

Ensure that the com.snc.process_flow.reporting.require_flow_access system property is set to true

More information

Attribute	Description
Configuration name	com.snc.process_flow.reporting.require_flow_access
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	true
Default value	<none>
Fallback value	true
Category	Access control
Security risk	Severity score: 2.7 CVSS score: Low Security risk details: There may be minor information disclosure if this property is not set securely.
Dependencies and prerequisites	None
Functional impact	When this property is enabled, the security for reading flow context records are increased. The instance enforces that a user trying to read the flow context has read access to the parent flow as well.