Disable Voice Chat Guest Impersonation
Use a system property to ensure that voice interactions/conversations are recorded under the appropriate internal integration user.
When an inbound or outbound call triggers the Start Voice Interaction API in a domain-separated environment, interactions are created under the guest user and in the default domain. This causes failures when retrieving interaction records due to domain mismatches, as the interaction is inaccessible to the actual user. This happens because the API call impersonates the guest user despite being invoked by a logged-in user, leading to interactions created in sibling domains that restrict access.
When the property is set to false, voice interactions/conversations are recorded under the guest user. This is a generic user that doesn’t accurately reflect the identity of the security principal creating the record.
When the property is set to true, voice interactions/conversations are recorded under the appropriate internal integration user.
Confirm that the com.glide.cs.voice.chat.disable.guest.impersonate system property is set to true in the System Properties [sys_properties] table, or that the property doesn't exist in the table.
More information
| Attribute | Description |
|---|---|
| Configuration name | com.glide.cs.voice.chat.disable.guest.impersonate |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | true |
| Category | Access control |
| Security risk | - Severity score: 1.9 - CVSS score: Low - Security risk details: If an attacker is able to inject records as the guest user, then platform users would not be able to distinguish between valid and spoofed records, leading to longer troubleshooting efforts. |
| Functional impact | There is no impact on system functionality. The property affects the way the Now platform logs internal actions. |
| Dependencies and prerequisites | None |
Parent Topic:Access control