Restrict access to background script
Use a system property to set a role requirement for accessing the Script Background module.
Use the glide.script_processor.admin system property to set a required role to access the Scripts - Background module. If this property isn't set to the recommended value of background_script_admin or another high privileged role, users with lower privileged roles are able to run background scripts on your instance.
Ensure the property glide.script_processor.admin is set to background_script_admin. This is also the default value.
Warning: This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.script_processor.admin |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | string |
| Recommended value | background\_script\_admin |
| Default value | background\_script\_admin |
| Fallback value | background\_script\_admin |
| Category | Access control |
| Security risk | - Severity score: 8.8 - CVSS score: High - Security risk details: Background scripts allow a complete bypass of the ACL system allowing full access to tables. |
| Functional Impact | Users without the role specified in the property are unable to access the Scripts - Background module, as intended. |
| Dependencies and prerequisites | None |
Parent Topic:Access control