Disable public access to favorites
Use the glide.ui.magellan.favorites.allow_public to specify whether unauthenticated users are allowed to see Favorites in the navigator.
If the glide.ui.magellan.favorites.allow_public system property is not set to the recommended value of false, then all unauthenticated users can access favorites of the same "Guest" user in the navigator.
Ensure the property glide.ui.magellan.favorites.allow_public is set to "false.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.ui.magellan.favorites.allow_public |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | false |
| Default value | <none> |
| Fallback value | false |
| Category | Architecture, design, and threat modeling |
| Security risk | - Severity score: 4.3 - CVSS rating: Medium - Security risk details: Unauthenticated users are allowed to access and potentially manipulate the Favorites of the shared "Guest" user, increasing the risk of unauthorized UI customization, data exposure, and user interface misuse. |
| Functional impact | Enabling this property acts as a layer of protection from unauthorized users. |
| Dependencies and prerequisites | None |
Parent Topic:Architecture, design, and threat modeling