Skip to content
Access control › Hardening settings › Platform Security
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Disable raw database query execution [Updated in Security Center 1.3 and removed in 2.0]

Control whether a user can perform raw SQL queries on the database.

The glide.db.allow_unsafe_dbi_execute_sql property enables users to perform raw SQL queries on the database, which can give access to tables and data outside of GlideRecord restrictions. If this property is not set to the recommended value of false, this allows for the calling of dbi.executeStatement() from a Glide Scriptable which can lead to malicious SQL statements being executed.

Warning: This property is both safe and no db override.

More information

AttributeDescription
Configuration nameglide.db.allow_unsafe_dbi_execute_sql
Configuration typeSystem Properties \(/sys\_properties\_list.do\)
Data typeBoolean
Recommended valuefalse
Default valuefalse
CategoryAccess control
Security risk
  • Severity score: 7.2
  • CVSS score: High
  • Security risk details: Not setting this property to false enables calling of dbi.executeStatement() from a Glide Scriptable.
Dependencies and prerequisitesNone
ReferencesAccess Control Lists

Parent Topic:Access control