Enforce Read Roles for Catalog Variable Search [New in Security Center 7.0]
Use system properties to ensure that only catalog variables with an empty read role are indexed for search.
When the property glide.ais.ingestion.ignore_catalog_variables_read_roles is set to the recommended value of false, only catalog variables with an empty read role are indexed for search. If this property is set to true then all variables are indexed for search regardless of any read roles specified on the variable.
Verify that the glide.ais.ingestion.ignore_catalog_variables_read_roles system property does not exist in the System Properties [sys_properties] table, or exists and is set to false.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.ais.ingestion.ignore_catalog_variables_read_roles |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | false |
| Default value | false |
| Category | Access control |
| Functional impact | This property affects the indexing of searchable content from catalog variables that require specific roles for read access. |
| Security risk | - Severity score: 2.6 - CVSS score: Low - Security risk details: Users will be able to search for variables that they do not have read roles to access to causing information disclosure. |
| Dependencies | None |
| References | Service catalog variables |
Parent Topic:Access control