Apply domain separation on dot walked fields [Updated in Security Center 1.3 and 1.5]

The glide.sys.domain.include_domain_condition_on_join property controls whether join queries are given domain separated conditions or not in order to ensure they apply domain separation functionality for dot walked fields.

This glide.sys.domain.include_domain_condition_on_join property controls whether join queries are given domain separated conditions or not, in order to ensure they apply domain separation functionality for dot walked fields. If glide.sys.domain.include_domain_condition_on_join is not set to the recommended value of true on an instance using domain separation, then sensitive information could be disclosed that is not to be shared with a specific domain.

Note:

When the domain separation plugin is installed, a sys_properties record for this property is installed with its value set to true, which is its non-default value. Otherwise, in the base system without domain separation installed, the property record won't exist and it will have its non-default value.

Warning:

This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

More information

Attribute	Description
Property name	glide.sys.domain.include_domain_condition_on_join
Configuration type	System Properties (/sys_properties_list.do)
Data type	boolean
Recommended value	True, when domain separation is installed, otherwise the property won't exist.
Default value	false
Category	Access control
Purpose	Controls whether join queries are given domain separated conditions or not, in order to ensure they apply domain separation functionality for dot walked fields.
Security risk	Severity score: 6.5 CVSS score: Medium Security risk details: If glide.sys.domain.include_domain_condition_on_join is not set to the recommended value of true, then sensitive information could be disclosed that is not to be shared with a specific domain.
References	Domain separation for service providers