Set guest user for soap requests
Configure this property to control the level of access of unauthenticated SOAP requests.
Use the com.glide.soap.guest_user system property to control the access level of unauthenticated SOAP requests. If this property isn't set to the recommended value of soap.guest or is set to a user with limited privileges, then SOAP requests execute on behalf of this user.
Ensure the property is set to soap.guest to ensure an appropriate level of access for unauthenticated SOAP requests.
More information
| Attribute | Description |
|---|---|
| Configuration name | **** |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | String |
| Recommended value | soap.guest |
| Default value | soap.guest |
| Fallback value | soap.guest |
| Category | Access control |
| Security risk | - Severity score: 8.1 - CVSS score: High - Security risk details: Unauthenticated SOAP requests can allow unauthorized access if not properly restricted. Evaluating these requests against a minimally privileged user helps reduce the risk of exposing sensitive operations. Failure to enforce this control may result in elevated access and compromise system integrity. |
| Functional impact | SOAP requests are restricted to the permissions of the soap.guest user. If an integration relies on a resource that does not have the appropriate ACLs for soap.guest, those requests will result in permission denials. |
| Dependencies and prerequisites | None |
Parent Topic:Access control