Restrict flow context read access
Use the com.snc.process_flow.reporting.require_flow_access property to enforce if an additional access check is required for a user to read a flow check.
When the com.snc.process_flow.reporting.require_flow_access system property is set to a value of true, there is an additional access check for a user trying to read a flow context. A user must have access to the parent flow to be able to read the flow context.
Ensure that the com.snc.process_flow.reporting.require_flow_access system property is set to true
More information
| Attribute | Description |
|---|---|
| Configuration name | com.snc.process_flow.reporting.require_flow_access |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | true |
| Category | Access control |
| Security risk | - Severity score: 2.7 - CVSS score: Low - Security risk details: There may be minor information disclosure if this property is not set securely. |
| Dependencies and prerequisites | None |
| Functional impact | When this property is enabled, the security for reading flow context records are increased. The instance enforces that a user trying to read the flow context has read access to the parent flow as well. |
Parent Topic:Access control