---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict knowledge bases access

# Restrict knowledge bases access {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The glide.knowman.block_access_with_no_user_criteria property is used to control the read/write access of users on knowledge based articles.
The glide.knowman.block_access_with_no_user_criteria system property is used in knowledge record user criteria security. If glide.knowman.block_access_with_no_user_criteria isn't set to the
recommended value of true, then knowledge bases without `can read` or `can contribute` user criteria are readable and writable by all users.

Ensure the property glide.knowman.block_access_with_no_user_criteria is set to true.

## More information {#sc-restrict-knowledge-bases-access__section_qhx_1b1_xwb}

{#sc-restrict-knowledge-bases-access__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.knowman.block_access_with_no_user_criteria |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | True |
| Fallback value | false |
| Category | [Access control](https://www.servicenow.com/docs/x7vcJqvJ0dwOasc9M2~48A "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 9.1 * CVSS score: Critical * Security risk details: Knowledge bases lacking explicit "can read" or "can contribute" user criteria are accessible and editable by all users, potentially leading to unauthorized access and modification of sensitive knowledge content. {#sc-restrict-knowledge-bases-access__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | Denies access to a knowledge base when either Can Read or Can Contribute isn't specified. |
[ ]

{#sc-restrict-knowledge-bases-access__table_ajc_b43_3kb}