Enforce security rules to sharing dashboards
Use the glide.cms.dashboards.sharing_with_secure_search property to control whether users can share dashboards.
When the glide.cms.dashboards.sharing_with_secure_search system property is not set to true, a user can share a dashboard to groups and roles that they do not personally have access to. This property enforces ACLs on searching the User [sys_user], Roles [sys_user_role], and Groups [sys_user_group] tables when sharing a dashboard.
Set the glide.cms.dashboards.sharing_with_secure_search system property is set to true.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.cms.dashboards.sharing_with_secure_search |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | false |
| Category | Access control |
| Security risk | - Severity score: 3.5 - CVSS score: Low - Security risk details: Oversharing a dashboard may result in minor confidentiality impacts in cases where a user shares a dashboard with a user, group, or role that should not access to the dashboard. |
| Dependencies and prerequisites | None |
| References | Access control |
| Functional impact | This property applies security rules to the list of users, user groups, and roles that are visible when sharing dashboards. |
Parent Topic:Access control