Enforce ACL on HR Lifecycle Events Data [New in Security Center 2.0]
Learn how to prevent unauthorized access to data in the Human Resources Lifecycle Events application by verifying that the glide.enforce_security_scope.sn_hr_le property is set to the secured value.
The glide.enforce_security_scope.sn_hr_le property limits the access control lists (ACLs) of several HR tables so that only the "sn_hr_le" scope is considered. If glide.enforce_security_scope.sn_hr_le isn’t set to the recommended value of true, then the data from the Human Resources: Lifecycle Events application will be exposed to ACLs from all other scopes which could lead to unauthorized users accessing sensitive data. For example, an IT administrator gaining access to HR data.
Warning: This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.enforce_security_scope.sn_hr_le |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | false |
| Category | Access control |
| Security risk | - Severity score: 6.5 - CVSS score: Medium - Security risk details: Not setting this property to the value of true, could cause the Human Resources: Lifecycle Events application data to be exposed to ACLs from all other scopes. This could lead to unauthorized users accessing sensitive data. |
| Dependencies and prerequisites | None |
Parent Topic:Access control