If com.glide.dd_allow_global_access_tables does not contain the recommended value of wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, and sp_page, then those tables could be read by a delegated developer. This could provide the delegated developer read access to sensitive information.

More information

Attribute Description
Property name com.glide.dd_allow_global_access_tables
Configuration type System Properties (/sys_properties_list.do)
Data type string
Recommended value wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, sp_page
Default value wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, sp_page
Category Access control
Security risk
  • Severity score: 2.7
  • CVSS score: Low
  • Security risk details: Ensure that com.glide.dd_allow_global_access_tables is set to wf_activity, wf_activity_definition, wf_workflow, wf_workflow_version, sp_portal, sp_widget, sp_page.