Enforce read ACLs on report views

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read
  • Manage how Read ACLs are enforced on your instance.

    Use the glide.report.report_view.read_acl property to enforce the Read ACL (table level) on reporting functions when there is no Report View ACL on the table or field. If this property is not set to enforce, ACLs could be bypassed leading to sensitive information leakage.

    More information

    Attribute Description
    Configuration name glide.report.report_view.read_acl
    Configuration type System Properties (/sys_properties_list.do)
    Data type string
    Recommended value enforce
    Default value enforce
    Category Architecture, design, and threat modeling
    Security risk
    • Severity score: 7.1
    • CVSS score: High
    • Security risk details: Not setting this property to enforce could cause ACLs to be bypassed.
    Dependencies and prerequisites None