Enable Cross Scope Privilege Checks on Service Portal Form [New in Security Center 7.0]
Use a system property to enforce cross scope privilege checks on the Service Portal form widget and prevent unauthorized retrieval of forms and table data between scopes.
In Yokohama and later releases, queries enforce cross scope privilege checks on the table before reading the given sys_id information.
When the glide.service_portal.enforce_cross_scope_check_in_form property is set to the recommended value of true, cross scope privilege checks are enforced on the table. When set to false, the cross-scope privilege check isn’t enforced.
Set the glide.service_portal.enforce_cross_scope_check_in_form system property to true or confirm that the property doesn’t exist in the System Properties [sys_properties] table. If a record doesn’t exist in the sys_properties table, the value defaults to true.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.service_portal.enforce_cross_scope_check_in_form |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Category | Access control |
| Security risk | - Severity score: 3.1 - CVSS score: Low - Security risk details: A lack of cross scope privilege checks could lead to unauthorized retrieval of forms and table data between scopes. |
| Dependencies and prerequisites | None |
Parent Topic:Access control