Configure widget security

1. Clear the Public check box.
2. Next to Roles, select the edit icon (
   Image omitted: edit-icon.png
   Edit icon).</li>
3. On the Roles window, select a role by moving it from the Available list to the Selected list.
4. Select Done.

1. Select the Public check box.

Note: Public widgets are accessible by any user even if the Roles list contains roles.

1. Specify the tables that public widgets can access for guest users.

This applies to widgets that accept the table input parameter only.

1.  In the **Public Table Allow List** related list, select **New**.
2.  In the **Tables** field, select a table from which guest users can access data in the widget.
3.  Select **Submit**.
4.  Repeat these steps to add additional tables.

1. In the Server script field, call the SPWidgetAccessControl API before any call to GlideRecord(options.table) and GlideRecordSecure(options.table). For example:

   javascript if(!new global.SPWidgetAccessControl().hasPublicAccess(options.table, $sp, options, input)){ gs.warn("Deny access to table which is not public: " + options.table); data.isValid = false; return; }

The parameters passed with SPWidgetAccessControl should be the same as those passed with GlideRecord(options.table) and GlideRecordSecure(options.table). For details on the SPWidgetAccessControl API, see SPWidgetAccessControl - Global.

1. Select Save.