Apply domain separation on dot walked fields
The glide.sys.domain.include_domain_condition_on_join property controls whether join queries are given domain separated conditions or not in order to ensure they apply domain separation functionality for dot walked fields.
The glide.sys.domain.include_domain_condition_on_join system property controls whether join queries are given domain separated conditions or not, in order to ensure they apply domain separation functionality for dot walked fields.
Ensure that the property glide.sys.domain.include_domain_condition_on_join is set to true when the Domain Separation plugin is active.
Warning: This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.
More information
| Attribute | Description |
|---|---|
| Property name | glide.sys.domain.include_domain_condition_on_join |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | trueNote: If domain separation is installed, otherwise the property doesn't exist. |
| Default value | <none> |
| Fallback value | false |
| Category | Access control |
| Purpose | Controls whether join queries are given domain separated conditions or not, in order to ensure they apply domain separation functionality for dot walked fields. |
| Security risk | - Severity score: 6.5 - CVSS score: Medium - Security risk details: Sensitive information could be disclosed that is not to be shared with a specific domain. |
| Functional impact | There may be moderate functional impact to the instance if components are reliant on the unsafe cross domain queries. Instances should be tested in non-production environments before enabling. |
| References | Domain separation for service providers |
Parent Topic:Access control