Restrict knowledge bases access
The glide.knowman.block_access_with_no_user_criteria property is used to control the read/write access of users on knowledge based articles.
The glide.knowman.block_access_with_no_user_criteria system property is used in knowledge record user criteria security. If glide.knowman.block_access_with_no_user_criteria isn't set to the recommended value of true, then knowledge bases without can read or can contribute user criteria become readable and writable by all users.
Ensure the property glide.knowman.block_access_with_no_user_criteria is set to true.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.knowman.block_access_with_no_user_criteria |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | false |
| Category | Access control |
| Security risk | - Severity score: 9.1 - CVSS score: Critical - Security risk details: Knowledge bases lacking explicit "can read" or "can contribute" user criteria may become accessible and editable by all users, potentially leading to unauthorized access and modification of sensitive knowledge content. |
| Dependencies and prerequisites | None |
| Functional impact | Denies access to a knowledge base when either Can Read or Can Contribute isn't specified. |
Parent Topic:Access control