Ensure archive table ACLs are checked [New in Security Center 1.3 and updated in 1.5]

  • Release version: Yokohama
  • Updated January 30, 2025
  • 1 minute to read

    • The glide.security.enable_archive_table_acls property controls whether access control lists (ACLs) of the original table, the table the archive table was created from, are evaluated to false.

    The glide.security.enable_archive_table_acls property should not be set to false since the original table's ACLs will be evaluated regardless of its value. You can avoid additional ACLs for an archive table by not adding them.

    More information

    Attribute Description
    Configuration name glide.security.enable_archive_table_acls
    Configuration type System Properties (/sys_properties_list.do)
    Data type boolean
    Recommended value true
    Default value true
    Category Access control
    Security risk
    • Severity score: 3
    • CVSS score: Low
    • Security risk details: If the property is set to false, ACLs added to archived tables will be ignored, an action that is counter intuitive and therefore may lead to authorization bypass.
    Dependencies and prerequisites None
    Functional impact When this property is set to true, any active read ACLs on archive tables will be honored. If no active read ACLs exist or the property is set to false, the original table's (table from which data was archived) will apply to the archive table.
    Note:
    Only read ACLs are supported on archive tables. Other operations on archive tables are governed internally through an Access Handler.